Hallo,
Als ich heute morgen Java installieren wollte bekam ich Meldungen von Emisoft ob ich die Datei ausführen möchte, da ich dachte Java wäre seriös habe ich auf einmal erlauben geklickt, danach ist noch der Verhaltenschutz angesprungen, den habe ich auch weggeklickt. Nach der dritten meldung war ich dann etwas erschrocken und mal einen System Scan durchgeführt, und siehe da ich habe einen Virus! Hier die Scan Logs:
Emsisoft

Emsisoft Anti-Malware - Version 9.0
Letztes Update: 30.08.2014 08:51:39
Benutzerkonto: AntonSauer-PC\Anton Sauer

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Rootkits, Speicher, Traces, C:\

PUPs-Erkennung: An
Archiv Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan Beginn:	30.08.2014 09:17:01
C:\Users\Anton Sauer\AppData\Local\Temp\dfs117E.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs4E8D.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs6CA8.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs9472.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfsDF5.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfsF641.tmp 	gefunden: Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\Downloads\eicar2.zip -> eicar_com.zip -> eicar.com 	gefunden: EICAR-Test-File (not a virus) (B)
C:\Users\Anton Sauer\Downloads\pcsecuritytest91.zip -> setup.exe -> (Instyler o) -> (Instyler Module 3) -> (Quarantine-PE) 	gefunden: Trojan.Agent.BAIA (B)

Gescannt	220931
Gefunden	8

Scan Ende:	30.08.2014 10:08:14
Scan Zeit:	0:51:13

C:\Users\Anton Sauer\Downloads\pcsecuritytest91.zip	Quarantäne Trojan.Agent.BAIA (B)
C:\Users\Anton Sauer\Downloads\eicar2.zip	Quarantäne EICAR-Test-File (not a virus) (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfsF641.tmp	Quarantäne Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfsDF5.tmp	Quarantäne Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs9472.tmp	Quarantäne Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs6CA8.tmp	Quarantäne Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs4E8D.tmp	Quarantäne Trojan.GenericKD.1773866 (B)
C:\Users\Anton Sauer\AppData\Local\Temp\dfs117E.tmp	Quarantäne Trojan.GenericKD.1773866 (B)

Quarantäne	8
         

Malwarebytes:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30.08.2014
Suchlauf-Zeit: 08:54:47
Logdatei: mlware.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.30.02
Rootkit Datenbank: v2014.08.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Anton Sauer

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 337889
Verstrichene Zeit: 12 Min, 44 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 3
Backdoor.Bot, C:\Users\Anton Sauer\AppData\Local\Temp\1a08e3c8-ae5f-4592-aed5-334925070db1\android.exe, In Quarantäne, [3b7fca0294e761d5192d90ea867b7789], 
Backdoor.Bot, C:\Users\Anton Sauer\AppData\Local\Temp\6a012acb-1d29-4da6-aee1-88f5b68dc331\android.exe, In Quarantäne, [5e5cbe0e09720333ab9b2258936e936d], 
PUP.Optional.Dropper.BL, C:\Users\Anton Sauer\Downloads\Java.exe, In Quarantäne, [d0ea814bc2b9c17521a61cb5dc28847c], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-08-2014 01
Ran by Anton Sauer (administrator) on ANTONSAUER-PC on 30-08-2014 10:27:37
Running from C:\Users\Anton Sauer\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WINZIP64.EXE
(Microsoft Corporation) C:\Windows\System32\wsqmcons.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2821936 2012-03-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [7138816 2014-04-04] (Broadcom Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4857256 2014-08-13] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-05-01] (Microsoft Corporation)
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-3549876660-1957230378-891602469-1000\...\MountPoints2: D - D:\setup.exe
HKU\S-1-5-21-3549876660-1957230378-891602469-1000\...\MountPoints2: {39078594-bc2c-11e3-8e9d-806e6f6e6963} - D:\AutoRun\AutoRunX\AutoRunX.exe
HKU\S-1-5-21-3549876660-1957230378-891602469-1000\...\MountPoints2: {ca59b3dc-bc2f-11e3-9376-806e6f6e6963} - D:\Start.exe
HKU\S-1-5-21-3549876660-1957230378-891602469-1000\...\MountPoints2: {f17e70ea-c08d-11e3-8483-b8763f4a79dd} - E:\XSManagerinstallation.exe
HKU\S-1-5-21-3549876660-1957230378-891602469-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-3549876660-1957230378-891602469-501\...\Run: [CUCore Agent] => C:\Users\Gast\AppData\Local\Radvision\Conference Client\8.3.000.62\ConfAgent.exe [403280 2014-05-15] (Avaya, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x81A6F17FC063CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - {8F424AB9-10F3-42A6-8C97-F0064412DFCA} URL = https://www.google.com/search?q={searchTerms}
BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @radvision.com/ConfClient -> C:\Users\Anton Sauer\AppData\Local\Radvision\Installer\1.5.0.5\npclientinstmgr.dll (Avaya, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-08-20]
FF Extension: Classic Theme Restorer - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-08-19]
FF Extension: Adblock Plus - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-20]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4754256 2014-08-13] (Emsisoft GmbH)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5824512 2014-04-04] (Broadcom Corporation) [File not signed]
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329848 2012-11-13] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
S3 cmntnet; C:\Windows\System32\DRIVERS\cmntnet.sys [141824 2014-04-10] (Wireless Data Device)
S3 cmnuusbser; C:\Windows\System32\DRIVERS\cmnuusbser.sys [123904 2014-04-10] (Wireless Device)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 cpuz137; \??\C:\Users\ANTONS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 GPU-Z; \??\C:\Users\ANTONS~1\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-30 10:27 - 2014-08-30 10:28 - 00013760 _____ () C:\Users\Anton Sauer\Downloads\FRST.txt
2014-08-30 10:27 - 2014-08-30 10:27 - 00000000 ____D () C:\FRST
2014-08-30 10:25 - 2014-08-30 10:25 - 00001414 _____ () C:\Users\Anton Sauer\Desktop\HitmanPro_20140830_1025.log
2014-08-30 10:20 - 2014-08-30 10:20 - 00000000 ____D () C:\Program Files\HitmanPro
2014-08-30 10:19 - 2014-08-30 10:19 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-08-30 10:18 - 2014-08-30 10:18 - 13485202 _____ () C:\Users\Anton Sauer\Downloads\hitmanpro379.zip
2014-08-30 10:17 - 2014-08-30 10:17 - 02103808 _____ (Farbar) C:\Users\Anton Sauer\Downloads\FRST64.exe
2014-08-30 10:17 - 2014-08-30 10:17 - 00000484 _____ () C:\Users\Anton Sauer\Downloads\defogger_disable.log
2014-08-30 10:17 - 2014-08-30 10:17 - 00000000 _____ () C:\Users\Anton Sauer\defogger_reenable
2014-08-30 10:16 - 2014-08-30 10:16 - 00050477 _____ () C:\Users\Anton Sauer\Downloads\Defogger.exe
2014-08-30 10:12 - 2014-08-30 10:12 - 00004098 _____ () C:\Users\Anton Sauer\Desktop\a2scan_140830-091701.txt
2014-08-30 09:18 - 2014-08-30 09:18 - 00001569 _____ () C:\Users\Anton Sauer\Desktop\mlware.txt
2014-08-30 09:14 - 2014-08-30 09:15 - 00000380 _____ () C:\Users\Anton Sauer\Desktop\fg_140830-091427.txt
2014-08-30 09:09 - 2014-08-30 09:09 - 00000454 _____ () C:\EamClean.log
2014-08-30 07:58 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-30 07:58 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-30 07:58 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-30 07:58 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-30 07:58 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-30 07:58 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-30 07:58 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-30 07:58 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-30 07:58 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-27 23:46 - 2014-08-30 10:08 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-08-27 23:43 - 2014-08-27 23:43 - 00001091 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-08-27 23:43 - 2014-08-27 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-08-27 23:42 - 2014-08-30 10:26 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-08-27 23:40 - 2014-08-27 23:42 - 169261904 _____ (Emsisoft GmbH ) C:\Users\Anton Sauer\Downloads\EmsisoftAntiMalwareSetup_10928784.exe
2014-08-27 16:46 - 2014-08-27 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Security Test 2009
2014-08-23 10:41 - 2014-08-23 10:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\CrashDumps
2014-08-20 11:56 - 2014-08-20 11:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Anton Sauer\Downloads\revosetup95.exe
2014-08-20 11:56 - 2014-08-20 11:56 - 00001264 _____ () C:\Users\Anton Sauer\Desktop\Revo Uninstaller.lnk
2014-08-20 11:56 - 2014-08-20 11:56 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-20 07:24 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-20 07:24 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-20 07:24 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-20 07:24 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-20 07:24 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-20 07:24 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-20 07:24 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-20 07:24 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-19 22:41 - 2014-08-19 22:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Macromedia
2014-08-19 22:40 - 2014-08-19 22:40 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Mozilla
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-19 22:38 - 2014-08-19 22:39 - 32047680 _____ () C:\Users\Anton Sauer\Downloads\Firefox_Setup_de31.0.exe
2014-08-19 21:29 - 2014-08-19 21:29 - 00000000 ____D () C:\ProgramData\PCSettings
2014-08-19 21:20 - 2014-08-19 21:22 - 203902392 ____N (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NIS-TW-21.1.0-GE.exe
2014-08-19 18:43 - 2014-08-19 18:43 - 02347384 _____ (ESET) C:\Users\Anton Sauer\Downloads\esetsmartinstaller_deu.exe
2014-08-19 18:39 - 2014-08-19 18:39 - 00001819 _____ () C:\Users\Anton Sauer\Desktop\njnj.txt
2014-08-19 18:13 - 2014-08-19 18:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-19 18:13 - 2014-08-19 18:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 15:03 - 2014-08-19 15:03 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Machinecode_Technologies
2014-08-19 15:02 - 2014-08-19 15:02 - 00002743 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-08-19 15:02 - 2014-08-19 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Banking
2014-08-19 15:01 - 2014-08-19 15:01 - 00000000 ____D () C:\Program Files (x86)\Machinecode Technologies
2014-08-19 14:59 - 2014-08-19 14:59 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Downloaded Installations
2014-08-19 14:57 - 2014-08-19 14:57 - 00002195 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:57 - 00002189 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-08-19 14:56 - 2014-08-19 14:58 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\WinZip
2014-08-19 14:56 - 2014-08-19 14:58 - 00000000 ____D () C:\ProgramData\WinZip
2014-08-19 14:56 - 2014-08-19 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-08-19 14:56 - 2014-08-19 14:56 - 00000000 ____D () C:\Program Files\WinZip
2014-08-19 14:53 - 2014-08-19 14:53 - 58807808 _____ () C:\Users\Anton Sauer\Downloads\wz185gev-64 (1).msi
2014-08-19 14:51 - 2014-08-19 14:51 - 01915297 _____ () C:\Users\Anton Sauer\Downloads\Secure Banking v2.0.1.rar
2014-08-19 12:04 - 2014-08-19 12:36 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar (1).zip
2014-08-19 12:03 - 2014-08-11 17:12 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys
2014-08-19 11:57 - 2014-08-19 11:57 - 00000000 ____D () C:\Windows\Tasks\360Disabled
2014-08-19 11:56 - 2014-08-19 21:12 - 00000000 ____D () C:\Program Files (x86)\360
2014-08-19 11:55 - 2014-08-19 11:55 - 29224776 _____ () C:\Users\Anton Sauer\Downloads\360TS_Setup.exe
2014-08-19 11:31 - 2014-08-19 19:26 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-08-19 07:33 - 2014-08-19 07:33 - 00000000 ____D () C:\NBRT
2014-08-18 22:08 - 2014-08-30 09:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-18 22:08 - 2014-08-19 18:17 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-18 22:08 - 2014-08-19 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-18 22:08 - 2014-08-19 18:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-18 22:08 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-18 22:08 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-18 22:08 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-18 22:08 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-18 22:02 - 2014-08-18 22:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-18 21:53 - 2014-08-18 21:56 - 211474544 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\N360-TW-21.1.0-GE.exe
2014-08-18 18:09 - 2014-08-18 18:53 - 00000000 ____D () C:\NPE
2014-08-18 18:07 - 2014-08-18 18:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-08-18 17:29 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\LogMeIn Rescue Applet
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (2).exe
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (1).exe
2014-08-18 17:10 - 2014-08-18 18:09 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\NPE
2014-08-18 14:58 - 2014-08-30 09:09 - 01372356 _____ () C:\Windows\PFRO.log
2014-08-18 13:36 - 2014-08-18 15:27 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar.zip
2014-08-18 13:12 - 2014-08-18 13:12 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Symantec
2014-08-18 13:00 - 2014-08-30 09:09 - 00000000 ____D () C:\ProgramData\Norton
2014-08-18 13:00 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-08-18 13:00 - 2014-08-18 13:00 - 01021808 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NortonNAVDownloader.exe
2014-08-18 13:00 - 2014-08-18 13:00 - 00001259 _____ () C:\Users\Anton Sauer\Desktop\Norton-Installationsdateien.lnk
2014-08-18 13:00 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-08-18 12:52 - 2014-08-18 12:52 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue.exe
2014-08-18 12:51 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-18 12:51 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-18 12:51 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-18 12:51 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-18 12:51 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-18 12:40 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-18 12:40 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-18 12:40 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-18 12:40 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-18 12:40 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-18 12:40 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-18 12:40 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-18 12:40 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-18 12:40 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-18 12:40 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-18 12:40 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-18 12:40 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-18 12:40 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-18 12:40 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 12:40 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-18 12:40 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-18 12:40 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 12:40 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-18 12:40 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 12:40 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 12:40 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 12:40 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 12:40 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 12:40 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 12:40 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-18 12:40 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 12:40 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 12:40 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 12:40 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 12:40 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 12:40 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 12:40 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 12:40 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 12:40 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 12:40 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 12:40 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-18 12:40 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 12:40 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 12:40 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 12:40 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 12:40 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 12:40 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 12:40 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 12:40 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 12:40 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 12:40 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 12:40 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 12:40 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 12:40 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 12:40 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 12:40 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 12:40 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 12:40 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 12:40 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-18 12:40 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 12:40 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 12:40 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-18 12:40 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-18 12:39 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-18 12:39 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-18 12:39 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-18 12:39 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-16 14:41 - 2014-08-16 14:44 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Steganos Safe
2014-08-16 14:40 - 2014-08-18 15:00 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos VPN
2014-08-16 14:39 - 2014-08-20 14:12 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos
2014-08-16 14:33 - 2014-08-18 17:35 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-08-16 14:26 - 2014-08-16 14:26 - 00001962 _____ () C:\Windows\DPINST.LOG
2014-08-16 14:20 - 2014-08-30 09:09 - 00002520 _____ () C:\Windows\setupact.log
2014-08-16 14:20 - 2014-08-18 12:31 - 00119568 _____ () C:\Users\Anton Sauer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-16 14:20 - 2014-08-16 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 14:19 - 2014-08-18 12:29 - 00463808 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-15 21:20 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 18:46 - 2014-08-15 18:46 - 00001026 _____ () C:\Users\Gast\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000996 _____ () C:\Users\Anton Sauer\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:45 - 2014-08-19 19:41 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1)
2014-08-15 18:35 - 2014-08-15 18:44 - 14021962 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1).zip
2014-08-15 18:11 - 2014-08-15 18:17 - 09203218 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip
2014-08-15 18:01 - 2014-08-15 18:09 - 00539870 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip.opdownload
2014-08-15 13:35 - 2014-08-15 13:35 - 00000000 ____D () C:\Windows\pss
2014-08-09 17:01 - 2014-08-09 17:38 - 3192264704 _____ () C:\Users\Anton Sauer\Downloads\X15-65813.iso
2014-08-09 16:54 - 2014-08-15 13:39 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470.exe
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470 (1).exe
2014-08-09 16:54 - 2014-08-09 16:54 - 00001067 _____ () C:\Users\Anton Sauer\Desktop\Free Download Manager.lnk
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-08-06 16:32 - 2014-08-06 16:32 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1)
2014-08-06 16:30 - 2014-08-06 16:30 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1).zip
2014-08-06 16:28 - 2014-08-06 16:28 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de.zip
2014-08-04 10:12 - 2014-08-04 10:12 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-04 08:29 - 2014-08-04 08:29 - 00001116 _____ () C:\Users\Anton Sauer\Desktop\Amazon Music.lnk
2014-08-04 08:28 - 2014-08-04 08:28 - 38603216 _____ (Amazon) C:\Users\Anton Sauer\Downloads\AmazonMusicInstaller.exe
2014-08-01 14:44 - 2014-08-09 16:51 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\HpUpdate
2014-08-01 14:44 - 2014-08-01 14:44 - 00002260 _____ () C:\Users\Public\Desktop\HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00001187 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files (x86)\HP
2014-08-01 14:44 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMb411.dll
2014-08-01 14:43 - 2014-08-01 16:07 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\HP
2014-08-01 14:42 - 2014-08-01 14:43 - 58509424 _____ () C:\Users\Anton Sauer\Downloads\PS5510d_1315.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-30 10:28 - 2014-08-30 10:27 - 00013760 _____ () C:\Users\Anton Sauer\Downloads\FRST.txt
2014-08-30 10:27 - 2014-08-30 10:27 - 00000000 ____D () C:\FRST
2014-08-30 10:26 - 2014-08-27 23:42 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-08-30 10:25 - 2014-08-30 10:25 - 00001414 _____ () C:\Users\Anton Sauer\Desktop\HitmanPro_20140830_1025.log
2014-08-30 10:20 - 2014-08-30 10:20 - 00000000 ____D () C:\Program Files\HitmanPro
2014-08-30 10:19 - 2014-08-30 10:19 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-08-30 10:18 - 2014-08-30 10:18 - 13485202 _____ () C:\Users\Anton Sauer\Downloads\hitmanpro379.zip
2014-08-30 10:17 - 2014-08-30 10:17 - 02103808 _____ (Farbar) C:\Users\Anton Sauer\Downloads\FRST64.exe
2014-08-30 10:17 - 2014-08-30 10:17 - 00000484 _____ () C:\Users\Anton Sauer\Downloads\defogger_disable.log
2014-08-30 10:17 - 2014-08-30 10:17 - 00000000 _____ () C:\Users\Anton Sauer\defogger_reenable
2014-08-30 10:17 - 2014-04-04 21:14 - 00000000 ____D () C:\Users\Anton Sauer
2014-08-30 10:16 - 2014-08-30 10:16 - 00050477 _____ () C:\Users\Anton Sauer\Downloads\Defogger.exe
2014-08-30 10:12 - 2014-08-30 10:12 - 00004098 _____ () C:\Users\Anton Sauer\Desktop\a2scan_140830-091701.txt
2014-08-30 10:08 - 2014-08-27 23:46 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-08-30 09:41 - 2014-04-04 21:09 - 01300445 _____ () C:\Windows\WindowsUpdate.log
2014-08-30 09:18 - 2014-08-30 09:18 - 00001569 _____ () C:\Users\Anton Sauer\Desktop\mlware.txt
2014-08-30 09:17 - 2014-08-18 22:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-30 09:16 - 2009-07-14 06:45 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-30 09:16 - 2009-07-14 06:45 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-30 09:15 - 2014-08-30 09:14 - 00000380 _____ () C:\Users\Anton Sauer\Desktop\fg_140830-091427.txt
2014-08-30 09:09 - 2014-08-30 09:09 - 00000454 _____ () C:\EamClean.log
2014-08-30 09:09 - 2014-08-18 14:58 - 01372356 _____ () C:\Windows\PFRO.log
2014-08-30 09:09 - 2014-08-18 13:00 - 00000000 ____D () C:\ProgramData\Norton
2014-08-30 09:09 - 2014-08-16 14:20 - 00002520 _____ () C:\Windows\setupact.log
2014-08-30 09:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-30 09:08 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-08-30 08:38 - 2014-06-25 07:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-30 08:37 - 2014-06-25 07:25 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-30 08:37 - 2014-06-25 07:23 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-30 08:37 - 2014-06-25 07:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-30 08:37 - 2009-07-14 20:18 - 00000000 ____D () C:\Windows\ShellNew
2014-08-30 08:37 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-08-30 08:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-30 08:32 - 2014-06-25 14:21 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\uTorrent
2014-08-27 23:43 - 2014-08-27 23:43 - 00001091 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-08-27 23:43 - 2014-08-27 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-08-27 23:42 - 2014-08-27 23:40 - 169261904 _____ (Emsisoft GmbH ) C:\Users\Anton Sauer\Downloads\EmsisoftAntiMalwareSetup_10928784.exe
2014-08-27 16:46 - 2014-08-27 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Security Test 2009
2014-08-23 10:41 - 2014-08-23 10:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\CrashDumps
2014-08-20 14:12 - 2014-08-16 14:39 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos
2014-08-20 13:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-20 12:01 - 2014-06-20 15:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Windows Live
2014-08-20 11:56 - 2014-08-20 11:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Anton Sauer\Downloads\revosetup95.exe
2014-08-20 11:56 - 2014-08-20 11:56 - 00001264 _____ () C:\Users\Anton Sauer\Desktop\Revo Uninstaller.lnk
2014-08-20 11:56 - 2014-08-20 11:56 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-20 07:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-20 07:36 - 2014-04-07 23:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-20 07:34 - 2014-04-07 23:02 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-20 07:23 - 2014-05-23 17:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-19 22:41 - 2014-08-19 22:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Macromedia
2014-08-19 22:40 - 2014-08-19 22:40 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Mozilla
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-19 22:39 - 2014-08-19 22:38 - 32047680 _____ () C:\Users\Anton Sauer\Downloads\Firefox_Setup_de31.0.exe
2014-08-19 21:29 - 2014-08-19 21:29 - 00000000 ____D () C:\ProgramData\PCSettings
2014-08-19 21:22 - 2014-08-19 21:20 - 203902392 ____N (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NIS-TW-21.1.0-GE.exe
2014-08-19 21:12 - 2014-08-19 11:56 - 00000000 ____D () C:\Program Files (x86)\360
2014-08-19 19:41 - 2014-08-15 18:45 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1)
2014-08-19 19:26 - 2014-08-19 11:31 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-08-19 18:59 - 2014-05-01 19:54 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-19 18:43 - 2014-08-19 18:43 - 02347384 _____ (ESET) C:\Users\Anton Sauer\Downloads\esetsmartinstaller_deu.exe
2014-08-19 18:39 - 2014-08-19 18:39 - 00001819 _____ () C:\Users\Anton Sauer\Desktop\njnj.txt
2014-08-19 18:17 - 2014-08-18 22:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-19 18:17 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-19 18:17 - 2014-08-18 22:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-19 18:14 - 2014-08-19 18:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-19 18:14 - 2014-08-19 18:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 18:05 - 2014-06-07 23:14 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1396640125
2014-08-19 18:05 - 2014-04-04 21:35 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-19 15:03 - 2014-08-19 15:03 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Machinecode_Technologies
2014-08-19 15:02 - 2014-08-19 15:02 - 00002743 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-08-19 15:02 - 2014-08-19 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Banking
2014-08-19 15:01 - 2014-08-19 15:01 - 00000000 ____D () C:\Program Files (x86)\Machinecode Technologies
2014-08-19 14:59 - 2014-08-19 14:59 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Downloaded Installations
2014-08-19 14:58 - 2014-08-19 14:56 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\WinZip
2014-08-19 14:58 - 2014-08-19 14:56 - 00000000 ____D () C:\ProgramData\WinZip
2014-08-19 14:57 - 2014-08-19 14:57 - 00002195 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:57 - 00002189 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-08-19 14:56 - 2014-08-19 14:56 - 00000000 ____D () C:\Program Files\WinZip
2014-08-19 14:53 - 2014-08-19 14:53 - 58807808 _____ () C:\Users\Anton Sauer\Downloads\wz185gev-64 (1).msi
2014-08-19 14:51 - 2014-08-19 14:51 - 01915297 _____ () C:\Users\Anton Sauer\Downloads\Secure Banking v2.0.1.rar
2014-08-19 12:36 - 2014-08-19 12:04 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar (1).zip
2014-08-19 11:57 - 2014-08-19 11:57 - 00000000 ____D () C:\Windows\Tasks\360Disabled
2014-08-19 11:55 - 2014-08-19 11:55 - 29224776 _____ () C:\Users\Anton Sauer\Downloads\360TS_Setup.exe
2014-08-19 07:33 - 2014-08-19 07:33 - 00000000 ____D () C:\NBRT
2014-08-18 22:08 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-18 22:04 - 2014-08-18 22:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-18 21:56 - 2014-08-18 21:53 - 211474544 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\N360-TW-21.1.0-GE.exe
2014-08-18 21:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-18 18:53 - 2014-08-18 18:09 - 00000000 ____D () C:\NPE
2014-08-18 18:53 - 2014-08-18 17:29 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\LogMeIn Rescue Applet
2014-08-18 18:09 - 2014-08-18 17:10 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\NPE
2014-08-18 18:07 - 2014-08-18 18:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-08-18 17:35 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Abelssoft
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (2).exe
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (1).exe
2014-08-18 15:27 - 2014-08-18 13:36 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar.zip
2014-08-18 15:00 - 2014-08-16 14:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos VPN
2014-08-18 14:58 - 2014-05-03 15:14 - 00000000 ____D () C:\Program Files (x86)\G Data
2014-08-18 13:15 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-08-18 13:12 - 2014-08-18 13:12 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Symantec
2014-08-18 13:00 - 2014-08-18 13:00 - 01021808 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NortonNAVDownloader.exe
2014-08-18 13:00 - 2014-08-18 13:00 - 00001259 _____ () C:\Users\Anton Sauer\Desktop\Norton-Installationsdateien.lnk
2014-08-18 13:00 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-08-18 12:58 - 2014-05-03 15:10 - 00000000 ____D () C:\ProgramData\G Data
2014-08-18 12:52 - 2014-08-18 12:52 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue.exe
2014-08-18 12:31 - 2014-08-16 14:20 - 00119568 _____ () C:\Users\Anton Sauer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-18 12:29 - 2014-08-16 14:19 - 00463808 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-16 14:44 - 2014-08-16 14:41 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Steganos Safe
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-08-16 14:28 - 2014-05-03 15:15 - 00001558 _____ () C:\Users\Anton Sauer\AppData\Roaming\gdscan.log
2014-08-16 14:26 - 2014-08-16 14:26 - 00001962 _____ () C:\Windows\DPINST.LOG
2014-08-16 14:20 - 2014-08-16 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-15 18:46 - 2014-08-15 18:46 - 00001026 _____ () C:\Users\Gast\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000996 _____ () C:\Users\Anton Sauer\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:44 - 2014-08-15 18:35 - 14021962 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1).zip
2014-08-15 18:17 - 2014-08-15 18:11 - 09203218 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip
2014-08-15 18:09 - 2014-08-15 18:01 - 00539870 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip.opdownload
2014-08-15 13:39 - 2014-08-09 16:54 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Free Download Manager
2014-08-15 13:35 - 2014-08-15 13:35 - 00000000 ____D () C:\Windows\pss
2014-08-11 17:12 - 2014-08-19 12:03 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys
2014-08-09 17:38 - 2014-08-09 17:01 - 3192264704 _____ () C:\Users\Anton Sauer\Downloads\X15-65813.iso
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470.exe
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470 (1).exe
2014-08-09 16:54 - 2014-08-09 16:54 - 00001067 _____ () C:\Users\Anton Sauer\Desktop\Free Download Manager.lnk
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-08-09 16:51 - 2014-08-01 14:44 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\HpUpdate
2014-08-07 12:45 - 2014-04-05 00:22 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-08-07 04:06 - 2014-08-18 12:39 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-18 12:39 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 16:32 - 2014-08-06 16:32 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1)
2014-08-06 16:30 - 2014-08-06 16:30 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1).zip
2014-08-06 16:28 - 2014-08-06 16:28 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de.zip
2014-08-04 10:12 - 2014-08-04 10:12 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-04 08:29 - 2014-08-04 08:29 - 00001116 _____ () C:\Users\Anton Sauer\Desktop\Amazon Music.lnk
2014-08-04 08:28 - 2014-08-04 08:28 - 38603216 _____ (Amazon) C:\Users\Anton Sauer\Downloads\AmazonMusicInstaller.exe
2014-08-01 16:07 - 2014-08-01 14:43 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\HP
2014-08-01 14:47 - 2014-06-05 21:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-01 14:47 - 2014-06-05 21:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-01 14:45 - 2009-07-14 20:18 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-01 14:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-01 14:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-01 14:44 - 2014-08-01 14:44 - 00002260 _____ () C:\Users\Public\Desktop\HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00001187 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files (x86)\HP
2014-08-01 14:43 - 2014-08-01 14:42 - 58509424 _____ () C:\Users\Anton Sauer\Downloads\PS5510d_1315.exe
2014-08-01 13:45 - 2014-06-05 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-01 01:41 - 2014-08-18 12:40 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-18 12:40 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

Some content of TEMP:
====================
C:\Users\Anton Sauer\AppData\Local\Temp\sfamcc00001.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 20:47

==================== End Of Log ============================
         

Adition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-08-2014 01
Ran by Anton Sauer at 2014-08-30 10:28:41
Running from C:\Users\Anton Sauer\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avaya Scopia® Desktop Client (HKCU\...\{D4B018FD-B6EF-42E0-BE6D-31E1C60189E4}) (Version:  - Avaya, Inc.)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.7.3 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: 5.100.82.120 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Core Damage 0.8h (HKLM-x32\...\Core Damage 0.8h) (Version:  - )
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8E17BF11-A72D-4DA8-BFAA-DD262C17C2DE}) (Version:  - Microsoft)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft GmbH)
ETDWare PS/2-X64 10.6.9.9_WHQL (HKLM\...\Elantech) (Version: 10.6.9.9 - ELAN Microelectronic Corp.)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Download Manager 3.9.4 (HKLM-x32\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)
Geeks3D FurMark 1.13.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
HP Photosmart 5510d series - Grundlegende Software für das Gerät (HKLM\...\{03680F90-8737-46AD-8274-37B451815144}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
LinCity-NG 2.0 (HKLM-x32\...\LinCity-NG_is1) (Version:  - LinCity-NG Developers)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook 2013 (HKLM\...\Office15.OUTLOOK) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Outlook 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
MSI Afterburner 3.0.0 (HKLM-x32\...\Afterburner) (Version: 3.0.0 - MSI Co., LTD)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenCity 0.0.6.2 stable (HKLM-x32\...\OpenCity 0.0.6.2 stable_is1) (Version: OpenCity 0.0.6.2 stable - Duong Khang NGUYEN)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 23.0.1522.77 (HKLM-x32\...\Opera 23.0.1522.77) (Version: 23.0.1522.77 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RivaTuner Statistics Server 6.1.1 (HKLM-x32\...\RTSS) (Version: 6.1.1 - Unwinder)
SARDU 2.0.6.5 (HKLM-x32\...\SARDU) (Version: 2.0.6.5 - Davide Costa)
Secure Banking (HKLM-x32\...\{2088356A-A860-4619-B6DC-F6785AEBBBF7}) (Version: 2.0.1 - Machinecode Technologies)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.3.6 - Electronic Arts)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{E12997A4-DAEC-4563-B330-F21EB71880D9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.OUTLOOK_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.OUTLOOK_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.OUTLOOK_{540B47E7-0F89-4CA1-8BFA-5CF377A963AF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. )
XSManager (HKLM-x32\...\XSManager) (Version: 3.2 - XSManager)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

19-08-2014 12:55:36 WinZip 18.5 wird installiert
19-08-2014 13:01:40 Installed Secure Banking.
20-08-2014 05:23:03 Windows Update
20-08-2014 09:58:11 Revo Uninstaller's restore point - Windows Live Essentials
20-08-2014 09:58:39 Windows Live Essentials
20-08-2014 09:59:00 WLSetup
20-08-2014 12:11:14 Revo Uninstaller's restore point - Win32DiskImager version 0.9.5
20-08-2014 12:12:17 Revo Uninstaller's restore point - Steganos Privacy Suite 15
20-08-2014 12:16:58 Revo Uninstaller's restore point - Steganos Online Shield
30-08-2014 05:57:38 Windows Update
30-08-2014 06:32:58 Removed Microsoft Office Professional Plus 2010

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-08-16 14:36 - 00000895 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.google-analytics.com
127.0.0.1 google-analytics.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {057664BF-1AF7-4DBE-80A3-DE323FAF2823} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {073712A7-F095-49F6-B9E8-E1B6261EC2E1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {0CDB224D-C5CD-4F5B-9705-A0C2549602FB} - System32\Tasks\Opera scheduled Autoupdate 1396640125 => C:\Program Files (x86)\Opera\launcher.exe [2014-08-14] (Opera Software)
Task: {36BC8943-D648-4ACA-A7E0-C25EB5BAB3A1} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.6.15\SymErr.exe
Task: {485429B9-E9CC-453F-ABE5-377C2907D901} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4E073E0A-8C3C-419F-872C-27D8FBC25729} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.6.15\SymErr.exe
Task: {97E26360-12C1-443B-90BB-91DAD6D845C8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {AAC72F3A-9A3B-46B9-80AB-2E94FE7FA4DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2012-12-24 15:49 - 2012-12-24 15:49 - 00039936 _____ () C:\Windows\System32\R6E6AM.DLL
2014-04-10 10:59 - 2012-11-13 22:02 - 00329848 ____N () C:\Program Files (x86)\XSManager\WTGService.exe
2014-06-06 21:27 - 2014-05-20 04:44 - 00014280 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-06-06 21:45 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-04 21:17 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-05-21 18:50 - 2014-05-21 18:50 - 03454320 ____R () C:\Program Files\WinZip\WzWFR64.dll
2014-08-27 23:43 - 2014-08-15 18:43 - 00746536 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll
2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-06 21:27 - 2014-05-20 04:44 - 00012120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-08-20 08:11 - 2014-08-20 08:11 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\5744dbc804f3ddc8c5416a9de9e8c26d\IsdiInterop.ni.dll
2014-04-04 21:16 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-04 21:20 - 2012-02-08 03:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-08-19 22:39 - 2014-07-17 07:42 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Outlook 2013.lnk => C:\Windows\pss\Outlook 2013.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Photosmart 5510d series (Netzwerk).lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Photosmart 5510d series (Netzwerk).lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\Anton Sauer\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: CUCore Agent => "C:\Users\Anton Sauer\AppData\Local\Radvision\Conference Client\8.3.000.62\ConfAgent.exe" /minimize
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: HP Photosmart 5510d series (NET) => "C:\Program Files\HP\HP Photosmart 5510d series\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BQ3BNR305RW:NW" -scfn "HP Photosmart 5510d series (NET)" -AutoStart 1
MSCONFIG\startupreg: IntelTBRunOnce => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: SOS_Agent => "C:\Program Files (x86)\Steganos Online Shield\OnlineShieldClient.exe" -agent
MSCONFIG\startupreg: SSS15 Browser Monitor => "C:\Program Files (x86)\Steganos Privacy Suite 15\SteganosBrowserMonitor.exe"
MSCONFIG\startupreg: SSS15 Chrome Autofill Relay => "C:\Program Files (x86)\Steganos Privacy Suite 15\passwordmanagercom.exe"
MSCONFIG\startupreg: SSS15 File Redirection Starter => "C:\Program Files (x86)\Steganos Privacy Suite 15\fredirstarter.exe"
MSCONFIG\startupreg: Steganos HotKeys => "C:\Program Files (x86)\Steganos Privacy Suite 15\SteganosHotKeyService.exe"

==================== Faulty Device Manager Devices =============

Name: Broadcom Virtual Wireless Adapter
Description: Broadcom Virtual Wireless Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom
Service: BcmVWL
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/30/2014 09:09:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: wiaservc.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7ca0f
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000047a6b
ID des fehlerhaften Prozesses: 0x520
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3

Error: (08/30/2014 08:46:02 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm a2guard.exe, Version 9.0.0.4324 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: b70

Startzeit: 01cfc416cf922572

Endzeit: 100

Anwendungspfad: C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe

Berichts-ID: 4b10d793-3011-11e4-9199-20898469b134

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 118748

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 118748

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 117609

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 117609

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/27/2014 09:29:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11638

Error: (08/27/2014 09:29:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11638


System errors:
=============
Error: (08/30/2014 09:09:49 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/27/2014 04:42:19 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎23.‎08.‎2014 um 11:05:25 unerwartet heruntergefahren.

Error: (08/20/2014 11:18:54 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/20/2014 09:00:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/20/2014 09:00:05 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/20/2014 09:00:05 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (08/18/2014 09:39:08 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎18.‎08.‎2014 um 21:27:59 unerwartet heruntergefahren.

Error: (08/18/2014 06:07:43 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "NPEService" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (08/18/2014 00:30:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎16.‎08.‎2014 um 14:45:51 unerwartet heruntergefahren.

Error: (08/16/2014 02:20:16 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎16.‎08.‎2014 um 00:29:23 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (08/30/2014 09:09:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_stisvc6.1.7600.163854a5bc3c1wiaservc.dll6.1.7601.175144ce7ca0f400000150000000000047a6b52001cfc4215c07259fC:\Windows\system32\svchost.exec:\windows\system32\wiaservc.dll9c4bd06c-3014-11e4-b01f-20898469b134

Error: (08/30/2014 08:46:02 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: a2guard.exe9.0.0.4324b7001cfc416cf922572100C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe4b10d793-3011-11e4-9199-20898469b134

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 118748

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 118748

Error: (08/27/2014 09:31:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 117609

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 117609

Error: (08/27/2014 09:31:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/27/2014 09:29:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11638

Error: (08/27/2014 09:29:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11638


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Percentage of memory in use: 53%
Total physical RAM: 3914.36 MB
Available physical RAM: 1832.18 MB
Total Pagefile: 7826.89 MB
Available Pagefile: 5006.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:172.19 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0003B39C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ================
         

Danke im Voraus und beste Grüße

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo Schrauber,

hier das gewünschte Logfile:

ComboFix 14-08-29.03 - Anton Sauer 30.08.2014  11:48:35.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3914.2141 [GMT 2:00]
ausgeführt von:: c:\users\Anton Sauer\Desktop\ComboFix.exe
AV: Emsisoft Anti-Malware *Disabled/Updated* {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
SP: Emsisoft Anti-Malware *Disabled/Updated* {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-07-28 bis 2014-08-30  ))))))))))))))))))))))))))))))
.
.
2014-08-30 09:53 . 2014-08-30 09:53	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2014-08-30 09:53 . 2014-08-30 09:53	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-08-30 08:27 . 2014-08-30 08:29	--------	d-----w-	C:\FRST
2014-08-30 08:20 . 2014-08-30 08:20	--------	d-----w-	c:\program files\HitmanPro
2014-08-30 08:19 . 2014-08-30 08:19	--------	d-----w-	c:\programdata\HitmanPro
2014-08-27 21:46 . 2014-08-30 08:08	--------	d-----w-	c:\programdata\Emsisoft
2014-08-27 21:42 . 2014-08-30 09:33	--------	d-----w-	c:\program files (x86)\Emsisoft Anti-Malware
2014-08-23 08:41 . 2014-08-23 08:41	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\CrashDumps
2014-08-20 09:56 . 2014-08-20 09:56	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-08-20 05:24 . 2014-03-09 21:48	171160	----a-w-	c:\windows\system32\infocardapi.dll
2014-08-20 05:24 . 2014-03-09 21:48	1389208	----a-w-	c:\windows\system32\icardagt.exe
2014-08-20 05:24 . 2014-03-09 21:47	99480	----a-w-	c:\windows\SysWow64\infocardapi.dll
2014-08-20 05:24 . 2014-03-09 21:47	619672	----a-w-	c:\windows\SysWow64\icardagt.exe
2014-08-20 05:24 . 2014-06-30 22:24	8856	----a-w-	c:\windows\system32\icardres.dll
2014-08-20 05:24 . 2014-06-30 22:14	8856	----a-w-	c:\windows\SysWow64\icardres.dll
2014-08-20 05:24 . 2014-06-06 06:16	35480	----a-w-	c:\windows\SysWow64\TsWpfWrp.exe
2014-08-20 05:24 . 2014-06-06 06:12	35480	----a-w-	c:\windows\system32\TsWpfWrp.exe
2014-08-19 20:41 . 2014-08-19 20:41	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Macromedia
2014-08-19 20:40 . 2014-08-19 20:40	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Mozilla
2014-08-19 20:39 . 2014-08-19 20:39	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2014-08-19 19:29 . 2014-08-19 19:29	--------	d-----w-	c:\programdata\PCSettings
2014-08-19 13:03 . 2014-08-19 13:03	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Machinecode_Technologies
2014-08-19 13:01 . 2014-08-19 13:01	--------	d-----w-	c:\program files (x86)\Machinecode Technologies
2014-08-19 12:59 . 2014-08-19 12:59	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Downloaded Installations
2014-08-19 12:56 . 2014-08-19 12:58	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\WinZip
2014-08-19 12:56 . 2014-08-19 12:58	--------	d-----w-	c:\programdata\WinZip
2014-08-19 12:56 . 2014-08-19 12:56	--------	d-----w-	c:\program files\WinZip
2014-08-19 10:03 . 2014-08-11 15:12	23752	----a-w-	c:\windows\SysWow64\drivers\efimon.sys
2014-08-19 09:56 . 2014-08-19 19:12	--------	d-----w-	c:\program files (x86)\360
2014-08-19 05:33 . 2014-08-19 05:33	--------	d-----w-	C:\NBRT
2014-08-18 20:08 . 2014-08-30 07:17	122584	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-18 20:08 . 2014-08-19 16:17	--------	d-----w-	c:\program files (x86)\ Malwarebytes Anti-Malware 
2014-08-18 20:08 . 2014-08-18 20:08	--------	d-----w-	c:\programdata\Malwarebytes
2014-08-18 20:08 . 2014-05-12 05:26	63704	----a-w-	c:\windows\system32\drivers\mwac.sys
2014-08-18 20:08 . 2014-05-12 05:26	91352	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2014-08-18 20:08 . 2014-05-12 05:25	25816	----a-w-	c:\windows\system32\drivers\mbam.sys
2014-08-18 16:09 . 2014-08-18 16:53	--------	d-----w-	C:\NPE
2014-08-18 16:07 . 2014-08-18 16:07	--------	d-----w-	c:\programdata\SMR410
2014-08-18 15:29 . 2014-08-18 16:53	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\LogMeIn Rescue Applet
2014-08-18 15:10 . 2014-08-18 16:09	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\NPE
2014-08-18 11:16 . 2014-08-30 06:44	--------	d-----w-	c:\program files (x86)\Common Files\Symantec Shared
2014-08-18 11:11 . 2014-08-18 11:11	--------	d-----w-	c:\windows\SysWow64\wbem\Logs
2014-08-18 11:00 . 2014-08-30 07:09	--------	d-----w-	c:\programdata\Norton
2014-08-18 10:51 . 2014-07-16 03:23	2048	----a-w-	c:\windows\system32\tzres.dll
2014-08-18 10:51 . 2014-07-16 02:46	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-08-18 10:51 . 2014-06-03 10:02	3241984	----a-w-	c:\windows\system32\msi.dll
2014-08-18 10:51 . 2014-06-03 10:02	112064	----a-w-	c:\windows\system32\consent.exe
2014-08-18 10:51 . 2014-06-03 10:02	504320	----a-w-	c:\windows\system32\msihnd.dll
2014-08-18 10:51 . 2014-06-03 10:02	1941504	----a-w-	c:\windows\system32\authui.dll
2014-08-18 10:51 . 2014-06-03 09:29	337408	----a-w-	c:\windows\SysWow64\msihnd.dll
2014-08-18 10:51 . 2014-06-03 09:29	2363392	----a-w-	c:\windows\SysWow64\msi.dll
2014-08-18 10:51 . 2014-06-03 09:29	1805824	----a-w-	c:\windows\SysWow64\authui.dll
2014-08-18 10:39 . 2014-07-14 02:02	1216000	----a-w-	c:\windows\system32\rpcrt4.dll
2014-08-18 10:39 . 2014-07-14 01:40	664064	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2014-08-18 10:39 . 2014-08-07 02:06	529920	----a-w-	c:\windows\system32\aepdu.dll
2014-08-18 10:39 . 2014-08-07 02:01	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-08-16 12:40 . 2014-08-18 13:00	--------	d-----w-	c:\users\Anton Sauer\AppData\Roaming\Steganos VPN
2014-08-16 12:39 . 2014-08-20 12:12	--------	d-----w-	c:\users\Anton Sauer\AppData\Roaming\Steganos
2014-08-16 12:33 . 2014-08-18 15:35	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Abelssoft
2014-08-16 12:33 . 2014-08-16 12:33	--------	d-----w-	c:\users\Anton Sauer\AppData\Roaming\Abelssoft
2014-08-16 12:33 . 2014-08-16 12:33	--------	d-----w-	c:\programdata\XDMessagingv4
2014-08-15 19:20 . 2014-06-16 02:10	985536	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2014-08-13 10:08 . 2014-08-13 10:08	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Diagnostics
2014-08-09 14:57 . 2014-08-09 15:00	--------	d-----w-	C:\Downloads
2014-08-09 14:54 . 2014-08-09 14:54	--------	d-----w-	c:\programdata\Free Download Manager
2014-08-09 14:54 . 2014-08-15 11:39	--------	d-----w-	c:\users\Anton Sauer\AppData\Roaming\Free Download Manager
2014-08-09 14:54 . 2014-08-09 14:54	--------	d-----w-	c:\program files (x86)\Free Download Manager
2014-08-04 08:12 . 2014-08-04 08:12	--------	d-----w-	C:\NVIDIA Corporation
2014-08-04 06:29 . 2014-08-04 06:29	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\Amazon Music
2014-08-01 12:44 . 2014-08-09 14:51	--------	d-----w-	c:\users\Anton Sauer\AppData\Roaming\HpUpdate
2014-08-01 12:44 . 2012-10-17 02:31	741480	------w-	c:\windows\system32\HPDiscoPMb411.dll
2014-08-01 12:44 . 2014-08-01 12:44	--------	d-----w-	c:\programdata\HP
2014-08-01 12:44 . 2014-08-01 12:44	--------	d-----w-	c:\program files (x86)\HP
2014-08-01 12:44 . 2014-08-01 12:44	--------	d-----w-	c:\program files\HP
2014-08-01 12:43 . 2014-08-01 14:07	--------	d-----w-	c:\users\Anton Sauer\AppData\Local\HP
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-30 08:27 . 2014-06-09 10:14	163504	----a-w-	c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2014-08-20 05:34 . 2014-04-07 21:02	99218768	----a-w-	c:\windows\system32\MRT.exe
2014-06-18 02:18 . 2014-07-26 18:00	692736	----a-w-	c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-26 18:00	646144	----a-w-	c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-26 18:00	3157504	----a-w-	c:\windows\system32\win32k.sys
2014-06-10 19:50 . 2014-06-10 19:50	6112864	----a-w-	c:\windows\system32\usbaaplrc.dll
2014-06-10 19:50 . 2014-06-10 19:50	54784	----a-w-	c:\windows\system32\drivers\usbaapl64.sys
2014-06-10 19:50 . 2014-06-10 19:50	23040	----a-w-	c:\windows\system32\drivers\netaapl64.sys
2014-06-06 10:10 . 2014-07-26 18:00	624128	----a-w-	c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-26 18:00	509440	----a-w-	c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-26 17:55	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-26 17:55	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-26 17:55	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-07-27 09:45	1730256	----a-w-	c:\progra~2\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-07-27 09:45	1730256	----a-w-	c:\progra~2\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-07-27 09:45	1730256	----a-w-	c:\progra~2\MICROS~3\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2012-03-23 1105488]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe" [2014-08-13 4857256]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\DRIVERS\bcmvwl64.sys;c:\windows\SYSNATIVE\DRIVERS\bcmvwl64.sys [x]
R3 cmntnet;Wireless Data Device USB Ethernet Driver;c:\windows\system32\DRIVERS\cmntnet.sys;c:\windows\SYSNATIVE\DRIVERS\cmntnet.sys [x]
R3 cmnuusbser;Mobile Connector USB Device for Serial Communication Device;c:\windows\system32\DRIVERS\cmnuusbser.sys;c:\windows\SYSNATIVE\DRIVERS\cmnuusbser.sys [x]
R3 cpuz137;cpuz137;c:\users\ANTONS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys;c:\users\ANTONS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [x]
R3 GPU-Z;GPU-Z;c:\users\ANTONS~1\AppData\Local\Temp\GPU-Z.sys;c:\users\ANTONS~1\AppData\Local\Temp\GPU-Z.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [x]
S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [x]
S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [x]
S2 a2AntiMalware;Emsisoft Protection Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WTGService;WTGService;c:\program files (x86)\XSManager\WTGService.exe;c:\program files (x86)\XSManager\WTGService.exe [x]
S3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [x]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdbd.sys [x]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdmp.sys [x]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiMSa.sys [x]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x]
S3 cleanhlp;cleanhlp;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys;c:\program files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - PWLCAUOW
*Deregistered* - pwlcauow
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-04-23 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-04-23 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-04-23 439064]
"ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-27 12343400]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe" [2014-04-04 7138816]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2350880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Alles mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: An OneNote s&enden - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: Auswahl mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Datei mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Videos mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-08-30  11:55:29
ComboFix-quarantined-files.txt  2014-08-30 09:55
ComboFix2.txt  2014-08-30 09:44
.
Vor Suchlauf: 20 Verzeichnis(se), 184.095.145.984 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 184.031.682.560 Bytes frei
.
- - End Of File - - E33A88F08D85AF12E90D6E7F0B445876
         

Gruß

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hey Schrauber,
heute morgen ist beim Start der Ersteinrichtungscreen von Emsisoft erneut gekommen, wo ich dann alles nochmal eingestellt habe.
Hier die Logfiles:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30.08.2014
Suchlauf-Zeit: 16:45:23
Logdatei: mam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.30.04
Rootkit Datenbank: v2014.08.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Anton Sauer

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 350243
Verstrichene Zeit: 10 Min, 9 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Anton Sauer on 30.08.2014 at 17:34:42,07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Anton Sauer\AppData\Roaming\mozilla\firefox\profiles\v09gtio9.default\minidumps [3 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.08.2014 at 17:49:40,79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

AdwCleaner Logfile:

# AdwCleaner v3.308 - Bericht erstellt am 30/08/2014 um 17:16:27
# Aktualisiert 20/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Anton Sauer - ANTONSAUER-PC
# Gestartet von : C:\Users\Anton Sauer\Downloads\adwcleaner_3.308.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cdburnerxp-pro-64-bit_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cdburnerxp-pro-64-bit_RASMANCS
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1298 octets] - [30/08/2014 17:06:18]
AdwCleaner[S0].txt - [1173 octets] - [30/08/2014 17:16:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1233 octets] ##########
         

[/CODE]
--- --- ---

Adition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2014
Ran by Anton Sauer at 2014-08-31 13:53:06
Running from C:\Users\Anton Sauer\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avaya Scopia® Desktop Client (HKCU\...\{D4B018FD-B6EF-42E0-BE6D-31E1C60189E4}) (Version:  - Avaya, Inc.)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.7.3 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: 5.100.82.120 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Core Damage 0.8h (HKLM-x32\...\Core Damage 0.8h) (Version:  - )
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8E17BF11-A72D-4DA8-BFAA-DD262C17C2DE}) (Version:  - Microsoft)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft GmbH)
ETDWare PS/2-X64 10.6.9.9_WHQL (HKLM\...\Elantech) (Version: 10.6.9.9 - ELAN Microelectronic Corp.)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Download Manager 3.9.4 (HKLM-x32\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)
Geeks3D FurMark 1.13.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D)
HP Photosmart 5510d series - Grundlegende Software für das Gerät (HKLM\...\{03680F90-8737-46AD-8274-37B451815144}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Kubuntu (HKLM-x32\...\Wubi) (Version: 12.10-rev273 - Kubuntu)
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
LinCity-NG 2.0 (HKLM-x32\...\LinCity-NG_is1) (Version:  - LinCity-NG Developers)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook 2013 (HKLM\...\Office15.OUTLOOK) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Outlook 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
MSI Afterburner 3.0.0 (HKLM-x32\...\Afterburner) (Version: 3.0.0 - MSI Co., LTD)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenCity 0.0.6.2 stable (HKLM-x32\...\OpenCity 0.0.6.2 stable_is1) (Version: OpenCity 0.0.6.2 stable - Duong Khang NGUYEN)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 23.0.1522.77 (HKLM-x32\...\Opera 23.0.1522.77) (Version: 23.0.1522.77 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RivaTuner Statistics Server 6.1.1 (HKLM-x32\...\RTSS) (Version: 6.1.1 - Unwinder)
SARDU 2.0.6.5 (HKLM-x32\...\SARDU) (Version: 2.0.6.5 - Davide Costa)
Secure Banking (HKLM-x32\...\{2088356A-A860-4619-B6DC-F6785AEBBBF7}) (Version: 2.0.1 - Machinecode Technologies)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.3.6 - Electronic Arts)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{E12997A4-DAEC-4563-B330-F21EB71880D9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.OUTLOOK_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.OUTLOOK_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.OUTLOOK_{540B47E7-0F89-4CA1-8BFA-5CF377A963AF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0000-1000-0000000FF1CE}_Office15.OUTLOOK_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.OUTLOOK_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. )
XSManager (HKLM-x32\...\XSManager) (Version: 3.2 - XSManager)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

20-08-2014 05:23:03 Windows Update
20-08-2014 09:58:11 Revo Uninstaller's restore point - Windows Live Essentials
20-08-2014 09:58:39 Windows Live Essentials
20-08-2014 09:59:00 WLSetup
20-08-2014 12:11:14 Revo Uninstaller's restore point - Win32DiskImager version 0.9.5
20-08-2014 12:12:17 Revo Uninstaller's restore point - Steganos Privacy Suite 15
20-08-2014 12:16:58 Revo Uninstaller's restore point - Steganos Online Shield
30-08-2014 05:57:38 Windows Update
30-08-2014 06:32:58 Removed Microsoft Office Professional Plus 2010
31-08-2014 07:22:07 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-08-16 14:36 - 00000895 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.google-analytics.com
127.0.0.1 google-analytics.com


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {057664BF-1AF7-4DBE-80A3-DE323FAF2823} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {073712A7-F095-49F6-B9E8-E1B6261EC2E1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {0CDB224D-C5CD-4F5B-9705-A0C2549602FB} - System32\Tasks\Opera scheduled Autoupdate 1396640125 => C:\Program Files (x86)\Opera\launcher.exe [2014-08-14] (Opera Software)
Task: {36BC8943-D648-4ACA-A7E0-C25EB5BAB3A1} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.6.15\SymErr.exe
Task: {485429B9-E9CC-453F-ABE5-377C2907D901} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4E073E0A-8C3C-419F-872C-27D8FBC25729} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.6.15\SymErr.exe
Task: {97E26360-12C1-443B-90BB-91DAD6D845C8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {AAC72F3A-9A3B-46B9-80AB-2E94FE7FA4DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2012-12-24 15:49 - 2012-12-24 15:49 - 00039936 _____ () C:\Windows\System32\R6E6AM.DLL
2014-04-10 10:59 - 2012-11-13 22:02 - 00329848 ____N () C:\Program Files (x86)\XSManager\WTGService.exe
2014-06-06 21:45 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-04 21:17 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-08-31 13:41 - 2014-08-31 13:41 - 00049152 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp.exe
2014-08-31 13:41 - 2014-08-31 13:41 - 00050176 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\pyrun.exe
2014-08-27 23:43 - 2014-08-15 18:43 - 00746536 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll
2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-06 21:27 - 2014-05-20 04:44 - 00012120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-08-20 08:11 - 2014-08-20 08:11 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\5744dbc804f3ddc8c5416a9de9e8c26d\IsdiInterop.ni.dll
2014-04-04 21:16 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-04 21:20 - 2012-02-08 03:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-08-19 22:39 - 2014-07-17 07:42 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-08-31 13:41 - 2014-08-31 13:41 - 00057401 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\_sre.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00036864 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\_winreg.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00090112 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\_ctypes.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00049212 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\_socket.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00061497 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\zlib.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00020539 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\select.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00405504 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\unicodedata.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00020480 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\_subprocess.pyd
2014-08-31 13:41 - 2014-08-31 13:41 - 00004608 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\bin\cpuid.dll
2014-08-31 13:41 - 2014-08-31 13:41 - 00135228 _____ () C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\lib\pyexpat.pyd

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Outlook 2013.lnk => C:\Windows\pss\Outlook 2013.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Anton Sauer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Photosmart 5510d series (Netzwerk).lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Photosmart 5510d series (Netzwerk).lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\Anton Sauer\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: CUCore Agent => "C:\Users\Anton Sauer\AppData\Local\Radvision\Conference Client\8.3.000.62\ConfAgent.exe" /minimize
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: HP Photosmart 5510d series (NET) => "C:\Program Files\HP\HP Photosmart 5510d series\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BQ3BNR305RW:NW" -scfn "HP Photosmart 5510d series (NET)" -AutoStart 1
MSCONFIG\startupreg: IntelTBRunOnce => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: SOS_Agent => "C:\Program Files (x86)\Steganos Online Shield\OnlineShieldClient.exe" -agent
MSCONFIG\startupreg: SSS15 Browser Monitor => "C:\Program Files (x86)\Steganos Privacy Suite 15\SteganosBrowserMonitor.exe"
MSCONFIG\startupreg: SSS15 Chrome Autofill Relay => "C:\Program Files (x86)\Steganos Privacy Suite 15\passwordmanagercom.exe"
MSCONFIG\startupreg: SSS15 File Redirection Starter => "C:\Program Files (x86)\Steganos Privacy Suite 15\fredirstarter.exe"
MSCONFIG\startupreg: Steganos HotKeys => "C:\Program Files (x86)\Steganos Privacy Suite 15\SteganosHotKeyService.exe"

==================== Faulty Device Manager Devices =============

Name: Broadcom Virtual Wireless Adapter
Description: Broadcom Virtual Wireless Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom
Service: BcmVWL
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/31/2014 10:27:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/31/2014 10:27:15 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/31/2014 10:27:12 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (08/31/2014 09:45:25 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (08/31/2014 09:45:25 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "C:" den Befehl "chkdsk" aus.

Error: (08/31/2014 09:45:25 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "C:" den Befehl "chkdsk" aus.

Error: (08/31/2014 09:17:16 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎08.‎2014 um 18:02:20 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (08/31/2014 10:27:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\anton sauer\downloads\esetsmartinstaller_deu.exe

Error: (08/31/2014 10:27:15 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\anton sauer\downloads\esetsmartinstaller_deu.exe

Error: (08/31/2014 10:27:12 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\anton sauer\downloads\esetsmartinstaller_deu.exe


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Percentage of memory in use: 59%
Total physical RAM: 3914.36 MB
Available physical RAM: 1580.84 MB
Total Pagefile: 7826.89 MB
Available Pagefile: 4993.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:170.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0003B39C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2014
Ran by Anton Sauer (administrator) on ANTONSAUER-PC on 31-08-2014 13:52:17
Running from C:\Users\Anton Sauer\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp.exe
() C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp\pyrun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2821936 2012-03-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [7138816 2014-04-04] (Broadcom Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4857256 2014-08-13] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [166568 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x81A6F17FC063CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {8F424AB9-10F3-42A6-8C97-F0064412DFCA} URL = https://www.google.com/search?q={searchTerms}
BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @radvision.com/ConfClient -> C:\Users\Anton Sauer\AppData\Local\Radvision\Installer\1.5.0.5\npclientinstmgr.dll (Avaya, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-08-20]
FF Extension: Classic Theme Restorer - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-08-19]
FF Extension: Adblock Plus - C:\Users\Anton Sauer\AppData\Roaming\Mozilla\Firefox\Profiles\v09gtio9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-20]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 15\spmplugin3
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4754256 2014-08-13] (Emsisoft GmbH)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5824512 2014-04-04] (Broadcom Corporation) [File not signed]
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329848 2012-11-13] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
S3 cmntnet; C:\Windows\System32\DRIVERS\cmntnet.sys [141824 2014-04-10] (Wireless Data Device)
S3 cmnuusbser; C:\Windows\System32\DRIVERS\cmnuusbser.sys [123904 2014-04-10] (Wireless Device)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 cpuz137; \??\C:\Users\ANTONS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 GPU-Z; \??\C:\Users\ANTONS~1\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-31 13:52 - 2014-08-31 13:52 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\FRST-OlderVersion
2014-08-31 13:44 - 2014-08-31 13:44 - 00000000 ____D () C:\ubuntu
2014-08-31 13:40 - 2014-08-31 13:41 - 02501520 _____ () C:\Users\Anton Sauer\Downloads\wubi1210.exe
2014-08-31 09:53 - 2014-08-31 09:53 - 00000000 __SHD () C:\found.001
2014-08-30 17:49 - 2014-08-30 17:49 - 00000768 _____ () C:\Users\Anton Sauer\Desktop\JRT.txt
2014-08-30 17:25 - 2014-08-30 17:25 - 01016261 _____ (Thisisu) C:\Users\Anton Sauer\Downloads\JRT.exe
2014-08-30 17:25 - 2014-08-30 17:25 - 00000000 ____D () C:\Windows\ERUNT
2014-08-30 17:22 - 2014-08-30 17:22 - 00001313 _____ () C:\Users\Anton Sauer\Documents\AdwCleaner[S0].txt
2014-08-30 17:05 - 2014-08-30 17:16 - 00000000 ____D () C:\AdwCleaner
2014-08-30 17:05 - 2014-08-30 17:05 - 01364531 _____ () C:\Users\Anton Sauer\Downloads\adwcleaner_3.308(1).exe
2014-08-30 17:04 - 2014-08-30 17:04 - 01364531 _____ () C:\Users\Anton Sauer\Downloads\adwcleaner_3.308.exe
2014-08-30 17:04 - 2014-08-30 17:04 - 00001161 _____ () C:\Users\Anton Sauer\Documents\mam.txt
2014-08-30 11:55 - 2014-08-30 11:55 - 00019824 _____ () C:\ComboFix.txt
2014-08-30 11:35 - 2014-08-30 11:35 - 00013299 _____ () C:\Users\Anton Sauer\Desktop\ComboFix.exe - Verknüpfung.lnk
2014-08-30 11:35 - 2014-08-30 11:32 - 05576760 ____R (Swearware) C:\Users\Anton Sauer\Desktop\ComboFix.exe
2014-08-30 11:32 - 2014-08-30 11:55 - 00000000 ____D () C:\Qoobox
2014-08-30 11:32 - 2014-08-30 11:43 - 00000000 ____D () C:\Windows\erdnt
2014-08-30 11:32 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-30 11:32 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-30 11:32 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-30 11:32 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-30 11:32 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-30 11:32 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-30 11:32 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-30 11:32 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-30 11:29 - 2014-08-30 11:32 - 05576760 ____R (Swearware) C:\Users\Anton Sauer\Downloads\ComboFix.exe
2014-08-30 10:42 - 2014-08-30 10:42 - 00146331 _____ () C:\Users\Anton Sauer\Downloads\mbr.log
2014-08-30 10:42 - 2014-08-30 10:42 - 00146331 _____ () C:\Users\Anton Sauer\Desktop\mbr.log
2014-08-30 10:32 - 2014-08-30 10:32 - 00380416 _____ () C:\Users\Anton Sauer\Downloads\b44rrk8f.exe
2014-08-30 10:28 - 2014-08-30 10:29 - 00034001 _____ () C:\Users\Anton Sauer\Downloads\Addition.txt
2014-08-30 10:27 - 2014-08-31 13:52 - 00012742 _____ () C:\Users\Anton Sauer\Downloads\FRST.txt
2014-08-30 10:27 - 2014-08-31 13:52 - 00000000 ____D () C:\FRST
2014-08-30 10:25 - 2014-08-30 10:25 - 00001414 _____ () C:\Users\Anton Sauer\Desktop\HitmanPro_20140830_1025.log
2014-08-30 10:20 - 2014-08-30 10:20 - 00000000 ____D () C:\Program Files\HitmanPro
2014-08-30 10:19 - 2014-08-30 10:19 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-08-30 10:18 - 2014-08-30 10:18 - 13485202 _____ () C:\Users\Anton Sauer\Downloads\hitmanpro379.zip
2014-08-30 10:17 - 2014-08-31 13:52 - 02104320 _____ (Farbar) C:\Users\Anton Sauer\Downloads\FRST64.exe
2014-08-30 10:17 - 2014-08-30 10:17 - 00000484 _____ () C:\Users\Anton Sauer\Downloads\defogger_disable.log
2014-08-30 10:17 - 2014-08-30 10:17 - 00000000 _____ () C:\Users\Anton Sauer\defogger_reenable
2014-08-30 10:16 - 2014-08-30 10:16 - 00050477 _____ () C:\Users\Anton Sauer\Downloads\Defogger.exe
2014-08-30 10:12 - 2014-08-30 10:12 - 00004098 _____ () C:\Users\Anton Sauer\Desktop\a2scan_140830-091701.txt
2014-08-30 09:18 - 2014-08-30 09:18 - 00001569 _____ () C:\Users\Anton Sauer\Desktop\mlware.txt
2014-08-30 09:14 - 2014-08-30 09:15 - 00000380 _____ () C:\Users\Anton Sauer\Desktop\fg_140830-091427.txt
2014-08-30 09:09 - 2014-08-30 09:09 - 00000454 _____ () C:\EamClean.log
2014-08-30 08:05 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-30 08:05 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-30 08:05 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-30 07:58 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-30 07:58 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-30 07:58 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-30 07:58 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-30 07:58 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-30 07:58 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-30 07:58 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-30 07:58 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-30 07:58 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-30 07:58 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-27 23:46 - 2014-08-30 10:08 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-08-27 23:43 - 2014-08-27 23:43 - 00001091 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-08-27 23:43 - 2014-08-27 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-08-27 23:42 - 2014-08-31 13:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-08-27 23:40 - 2014-08-27 23:42 - 169261904 _____ (Emsisoft GmbH ) C:\Users\Anton Sauer\Downloads\EmsisoftAntiMalwareSetup_10928784.exe
2014-08-27 16:46 - 2014-08-27 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Security Test 2009
2014-08-23 10:41 - 2014-08-23 10:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\CrashDumps
2014-08-20 11:56 - 2014-08-20 11:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Anton Sauer\Downloads\revosetup95.exe
2014-08-20 11:56 - 2014-08-20 11:56 - 00001264 _____ () C:\Users\Anton Sauer\Desktop\Revo Uninstaller.lnk
2014-08-20 11:56 - 2014-08-20 11:56 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-20 07:24 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-20 07:24 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-20 07:24 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-20 07:24 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-20 07:24 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-20 07:24 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-20 07:24 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-20 07:24 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-19 22:41 - 2014-08-19 22:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Macromedia
2014-08-19 22:40 - 2014-08-19 22:40 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Mozilla
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-19 22:38 - 2014-08-19 22:39 - 32047680 _____ () C:\Users\Anton Sauer\Downloads\Firefox_Setup_de31.0.exe
2014-08-19 21:29 - 2014-08-19 21:29 - 00000000 ____D () C:\ProgramData\PCSettings
2014-08-19 21:20 - 2014-08-19 21:22 - 203902392 ____N (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NIS-TW-21.1.0-GE.exe
2014-08-19 18:43 - 2014-08-19 18:43 - 02347384 _____ (ESET) C:\Users\Anton Sauer\Downloads\esetsmartinstaller_deu.exe
2014-08-19 18:39 - 2014-08-19 18:39 - 00001819 _____ () C:\Users\Anton Sauer\Desktop\njnj.txt
2014-08-19 18:13 - 2014-08-19 18:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-19 18:13 - 2014-08-19 18:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 15:03 - 2014-08-19 15:03 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Machinecode_Technologies
2014-08-19 15:02 - 2014-08-19 15:02 - 00002743 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-08-19 15:02 - 2014-08-19 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Banking
2014-08-19 15:01 - 2014-08-19 15:01 - 00000000 ____D () C:\Program Files (x86)\Machinecode Technologies
2014-08-19 14:59 - 2014-08-19 14:59 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Downloaded Installations
2014-08-19 14:57 - 2014-08-19 14:57 - 00002195 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:57 - 00002189 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-08-19 14:56 - 2014-08-19 14:58 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\WinZip
2014-08-19 14:56 - 2014-08-19 14:58 - 00000000 ____D () C:\ProgramData\WinZip
2014-08-19 14:56 - 2014-08-19 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-08-19 14:56 - 2014-08-19 14:56 - 00000000 ____D () C:\Program Files\WinZip
2014-08-19 14:53 - 2014-08-19 14:53 - 58807808 _____ () C:\Users\Anton Sauer\Downloads\wz185gev-64 (1).msi
2014-08-19 14:51 - 2014-08-19 14:51 - 01915297 _____ () C:\Users\Anton Sauer\Downloads\Secure Banking v2.0.1.rar
2014-08-19 12:04 - 2014-08-19 12:36 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar (1).zip
2014-08-19 12:03 - 2014-08-11 17:12 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys
2014-08-19 11:57 - 2014-08-19 11:57 - 00000000 ____D () C:\Windows\Tasks\360Disabled
2014-08-19 11:56 - 2014-08-19 21:12 - 00000000 ____D () C:\Program Files (x86)\360
2014-08-19 11:55 - 2014-08-19 11:55 - 29224776 _____ () C:\Users\Anton Sauer\Downloads\360TS_Setup.exe
2014-08-19 11:31 - 2014-08-19 19:26 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-08-19 07:33 - 2014-08-19 07:33 - 00000000 ____D () C:\NBRT
2014-08-18 22:08 - 2014-08-30 16:45 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-18 22:08 - 2014-08-19 18:17 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-18 22:08 - 2014-08-19 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-18 22:08 - 2014-08-19 18:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-18 22:08 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-18 22:08 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-18 22:08 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-18 22:08 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-18 22:02 - 2014-08-18 22:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-18 21:53 - 2014-08-18 21:56 - 211474544 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\N360-TW-21.1.0-GE.exe
2014-08-18 18:09 - 2014-08-18 18:53 - 00000000 ____D () C:\NPE
2014-08-18 18:07 - 2014-08-18 18:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-08-18 17:29 - 2014-08-18 18:53 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\LogMeIn Rescue Applet
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (2).exe
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (1).exe
2014-08-18 17:10 - 2014-08-18 18:09 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\NPE
2014-08-18 14:58 - 2014-08-30 17:19 - 01374680 _____ () C:\Windows\PFRO.log
2014-08-18 13:36 - 2014-08-18 15:27 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar.zip
2014-08-18 13:12 - 2014-08-18 13:12 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Symantec
2014-08-18 13:00 - 2014-08-30 09:09 - 00000000 ____D () C:\ProgramData\Norton
2014-08-18 13:00 - 2014-08-18 13:15 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-08-18 13:00 - 2014-08-18 13:00 - 01021808 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NortonNAVDownloader.exe
2014-08-18 13:00 - 2014-08-18 13:00 - 00001259 _____ () C:\Users\Anton Sauer\Desktop\Norton-Installationsdateien.lnk
2014-08-18 13:00 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-08-18 12:52 - 2014-08-18 12:52 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue.exe
2014-08-18 12:51 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-18 12:51 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-18 12:51 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-18 12:51 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-18 12:51 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-18 12:51 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-18 12:40 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-18 12:40 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-18 12:40 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-18 12:40 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-18 12:40 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-18 12:40 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-18 12:40 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-18 12:40 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-18 12:40 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-18 12:40 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-18 12:40 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-18 12:40 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-18 12:40 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-18 12:40 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 12:40 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-18 12:40 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-18 12:40 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 12:40 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-18 12:40 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 12:40 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 12:40 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 12:40 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 12:40 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 12:40 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 12:40 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-18 12:40 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 12:40 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 12:40 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 12:40 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 12:40 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 12:40 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 12:40 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 12:40 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 12:40 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 12:40 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 12:40 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-18 12:40 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 12:40 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 12:40 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 12:40 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 12:40 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 12:40 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 12:40 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 12:40 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 12:40 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 12:40 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 12:40 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 12:40 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 12:40 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 12:40 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 12:40 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 12:40 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 12:40 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 12:40 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-18 12:40 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 12:40 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 12:40 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-18 12:40 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-18 12:39 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-18 12:39 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-18 12:39 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-18 12:39 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-16 14:41 - 2014-08-16 14:44 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Steganos Safe
2014-08-16 14:40 - 2014-08-18 15:00 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos VPN
2014-08-16 14:39 - 2014-08-20 14:12 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos
2014-08-16 14:33 - 2014-08-18 17:35 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-08-16 14:26 - 2014-08-16 14:26 - 00001962 _____ () C:\Windows\DPINST.LOG
2014-08-16 14:20 - 2014-08-31 09:55 - 00003024 _____ () C:\Windows\setupact.log
2014-08-16 14:20 - 2014-08-18 12:31 - 00119568 _____ () C:\Users\Anton Sauer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-16 14:20 - 2014-08-16 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 14:19 - 2014-08-31 09:55 - 00464336 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-15 21:20 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 18:46 - 2014-08-15 18:46 - 00001026 _____ () C:\Users\Gast\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000996 _____ () C:\Users\Anton Sauer\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:45 - 2014-08-19 19:41 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1)
2014-08-15 18:35 - 2014-08-15 18:44 - 14021962 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1).zip
2014-08-15 18:11 - 2014-08-15 18:17 - 09203218 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip
2014-08-15 18:01 - 2014-08-15 18:09 - 00539870 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip.opdownload
2014-08-15 13:35 - 2014-08-15 13:35 - 00000000 ____D () C:\Windows\pss
2014-08-09 17:01 - 2014-08-09 17:38 - 3192264704 _____ () C:\Users\Anton Sauer\Downloads\X15-65813.iso
2014-08-09 16:54 - 2014-08-15 13:39 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470.exe
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470 (1).exe
2014-08-09 16:54 - 2014-08-09 16:54 - 00001067 _____ () C:\Users\Anton Sauer\Desktop\Free Download Manager.lnk
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-08-06 16:32 - 2014-08-06 16:32 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1)
2014-08-06 16:30 - 2014-08-06 16:30 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1).zip
2014-08-06 16:28 - 2014-08-06 16:28 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de.zip
2014-08-04 10:12 - 2014-08-04 10:12 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-04 08:29 - 2014-08-04 08:29 - 00001116 _____ () C:\Users\Anton Sauer\Desktop\Amazon Music.lnk
2014-08-04 08:28 - 2014-08-04 08:28 - 38603216 _____ (Amazon) C:\Users\Anton Sauer\Downloads\AmazonMusicInstaller.exe
2014-08-01 14:44 - 2014-08-09 16:51 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\HpUpdate
2014-08-01 14:44 - 2014-08-01 14:44 - 00002260 _____ () C:\Users\Public\Desktop\HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00001187 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files (x86)\HP
2014-08-01 14:44 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMb411.dll
2014-08-01 14:43 - 2014-08-01 16:07 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\HP
2014-08-01 14:42 - 2014-08-01 14:43 - 58509424 _____ () C:\Users\Anton Sauer\Downloads\PS5510d_1315.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-31 13:52 - 2014-08-31 13:52 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\FRST-OlderVersion
2014-08-31 13:52 - 2014-08-30 10:27 - 00012742 _____ () C:\Users\Anton Sauer\Downloads\FRST.txt
2014-08-31 13:52 - 2014-08-30 10:27 - 00000000 ____D () C:\FRST
2014-08-31 13:52 - 2014-08-30 10:17 - 02104320 _____ (Farbar) C:\Users\Anton Sauer\Downloads\FRST64.exe
2014-08-31 13:44 - 2014-08-31 13:44 - 00000000 ____D () C:\ubuntu
2014-08-31 13:41 - 2014-08-31 13:40 - 02501520 _____ () C:\Users\Anton Sauer\Downloads\wubi1210.exe
2014-08-31 13:38 - 2014-08-27 23:42 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-08-31 13:34 - 2014-04-04 21:09 - 01345933 _____ () C:\Windows\WindowsUpdate.log
2014-08-31 10:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-31 10:03 - 2009-07-14 06:45 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-31 10:03 - 2009-07-14 06:45 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-31 09:55 - 2014-08-16 14:20 - 00003024 _____ () C:\Windows\setupact.log
2014-08-31 09:55 - 2014-08-16 14:19 - 00464336 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-31 09:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-31 09:53 - 2014-08-31 09:53 - 00000000 __SHD () C:\found.001
2014-08-30 17:49 - 2014-08-30 17:49 - 00000768 _____ () C:\Users\Anton Sauer\Desktop\JRT.txt
2014-08-30 17:25 - 2014-08-30 17:25 - 01016261 _____ (Thisisu) C:\Users\Anton Sauer\Downloads\JRT.exe
2014-08-30 17:25 - 2014-08-30 17:25 - 00000000 ____D () C:\Windows\ERUNT
2014-08-30 17:22 - 2014-08-30 17:22 - 00001313 _____ () C:\Users\Anton Sauer\Documents\AdwCleaner[S0].txt
2014-08-30 17:19 - 2014-08-18 14:58 - 01374680 _____ () C:\Windows\PFRO.log
2014-08-30 17:16 - 2014-08-30 17:05 - 00000000 ____D () C:\AdwCleaner
2014-08-30 17:05 - 2014-08-30 17:05 - 01364531 _____ () C:\Users\Anton Sauer\Downloads\adwcleaner_3.308(1).exe
2014-08-30 17:04 - 2014-08-30 17:04 - 01364531 _____ () C:\Users\Anton Sauer\Downloads\adwcleaner_3.308.exe
2014-08-30 17:04 - 2014-08-30 17:04 - 00001161 _____ () C:\Users\Anton Sauer\Documents\mam.txt
2014-08-30 16:45 - 2014-08-18 22:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-30 11:55 - 2014-08-30 11:55 - 00019824 _____ () C:\ComboFix.txt
2014-08-30 11:55 - 2014-08-30 11:32 - 00000000 ____D () C:\Qoobox
2014-08-30 11:53 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-08-30 11:44 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-08-30 11:43 - 2014-08-30 11:32 - 00000000 ____D () C:\Windows\erdnt
2014-08-30 11:35 - 2014-08-30 11:35 - 00013299 _____ () C:\Users\Anton Sauer\Desktop\ComboFix.exe - Verknüpfung.lnk
2014-08-30 11:32 - 2014-08-30 11:35 - 05576760 ____R (Swearware) C:\Users\Anton Sauer\Desktop\ComboFix.exe
2014-08-30 11:32 - 2014-08-30 11:29 - 05576760 ____R (Swearware) C:\Users\Anton Sauer\Downloads\ComboFix.exe
2014-08-30 10:42 - 2014-08-30 10:42 - 00146331 _____ () C:\Users\Anton Sauer\Downloads\mbr.log
2014-08-30 10:42 - 2014-08-30 10:42 - 00146331 _____ () C:\Users\Anton Sauer\Desktop\mbr.log
2014-08-30 10:32 - 2014-08-30 10:32 - 00380416 _____ () C:\Users\Anton Sauer\Downloads\b44rrk8f.exe
2014-08-30 10:29 - 2014-08-30 10:28 - 00034001 _____ () C:\Users\Anton Sauer\Downloads\Addition.txt
2014-08-30 10:25 - 2014-08-30 10:25 - 00001414 _____ () C:\Users\Anton Sauer\Desktop\HitmanPro_20140830_1025.log
2014-08-30 10:20 - 2014-08-30 10:20 - 00000000 ____D () C:\Program Files\HitmanPro
2014-08-30 10:19 - 2014-08-30 10:19 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-08-30 10:18 - 2014-08-30 10:18 - 13485202 _____ () C:\Users\Anton Sauer\Downloads\hitmanpro379.zip
2014-08-30 10:17 - 2014-08-30 10:17 - 00000484 _____ () C:\Users\Anton Sauer\Downloads\defogger_disable.log
2014-08-30 10:17 - 2014-08-30 10:17 - 00000000 _____ () C:\Users\Anton Sauer\defogger_reenable
2014-08-30 10:17 - 2014-04-04 21:14 - 00000000 ____D () C:\Users\Anton Sauer
2014-08-30 10:16 - 2014-08-30 10:16 - 00050477 _____ () C:\Users\Anton Sauer\Downloads\Defogger.exe
2014-08-30 10:12 - 2014-08-30 10:12 - 00004098 _____ () C:\Users\Anton Sauer\Desktop\a2scan_140830-091701.txt
2014-08-30 10:08 - 2014-08-27 23:46 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-08-30 09:18 - 2014-08-30 09:18 - 00001569 _____ () C:\Users\Anton Sauer\Desktop\mlware.txt
2014-08-30 09:15 - 2014-08-30 09:14 - 00000380 _____ () C:\Users\Anton Sauer\Desktop\fg_140830-091427.txt
2014-08-30 09:09 - 2014-08-30 09:09 - 00000454 _____ () C:\EamClean.log
2014-08-30 09:09 - 2014-08-18 13:00 - 00000000 ____D () C:\ProgramData\Norton
2014-08-30 09:08 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-08-30 08:38 - 2014-06-25 07:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-30 08:37 - 2014-06-25 07:25 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-30 08:37 - 2014-06-25 07:23 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-30 08:37 - 2014-06-25 07:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-30 08:37 - 2009-07-14 20:18 - 00000000 ____D () C:\Windows\ShellNew
2014-08-30 08:37 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-08-30 08:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-08-30 08:32 - 2014-06-25 14:21 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\uTorrent
2014-08-27 23:43 - 2014-08-27 23:43 - 00001091 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-08-27 23:43 - 2014-08-27 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-08-27 23:42 - 2014-08-27 23:40 - 169261904 _____ (Emsisoft GmbH ) C:\Users\Anton Sauer\Downloads\EmsisoftAntiMalwareSetup_10928784.exe
2014-08-27 16:46 - 2014-08-27 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Security Test 2009
2014-08-23 10:41 - 2014-08-23 10:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\CrashDumps
2014-08-23 04:07 - 2014-08-30 08:05 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-30 08:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-30 08:05 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 14:12 - 2014-08-16 14:39 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos
2014-08-20 12:01 - 2014-06-20 15:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Windows Live
2014-08-20 11:56 - 2014-08-20 11:56 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Anton Sauer\Downloads\revosetup95.exe
2014-08-20 11:56 - 2014-08-20 11:56 - 00001264 _____ () C:\Users\Anton Sauer\Desktop\Revo Uninstaller.lnk
2014-08-20 11:56 - 2014-08-20 11:56 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-08-20 07:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-20 07:36 - 2014-04-07 23:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-20 07:34 - 2014-04-07 23:02 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-20 07:23 - 2014-05-23 17:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-19 22:41 - 2014-08-19 22:41 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Macromedia
2014-08-19 22:40 - 2014-08-19 22:40 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Mozilla
2014-08-19 22:40 - 2014-08-19 22:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-19 22:39 - 2014-08-19 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-19 22:39 - 2014-08-19 22:38 - 32047680 _____ () C:\Users\Anton Sauer\Downloads\Firefox_Setup_de31.0.exe
2014-08-19 21:29 - 2014-08-19 21:29 - 00000000 ____D () C:\ProgramData\PCSettings
2014-08-19 21:22 - 2014-08-19 21:20 - 203902392 ____N (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NIS-TW-21.1.0-GE.exe
2014-08-19 21:12 - 2014-08-19 11:56 - 00000000 ____D () C:\Program Files (x86)\360
2014-08-19 19:41 - 2014-08-15 18:45 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1)
2014-08-19 19:26 - 2014-08-19 11:31 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-08-19 18:59 - 2014-05-01 19:54 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-19 18:43 - 2014-08-19 18:43 - 02347384 _____ (ESET) C:\Users\Anton Sauer\Downloads\esetsmartinstaller_deu.exe
2014-08-19 18:39 - 2014-08-19 18:39 - 00001819 _____ () C:\Users\Anton Sauer\Desktop\njnj.txt
2014-08-19 18:17 - 2014-08-18 22:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-19 18:17 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-19 18:17 - 2014-08-18 22:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-19 18:14 - 2014-08-19 18:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-19 18:14 - 2014-08-19 18:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 18:05 - 2014-06-07 23:14 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1396640125
2014-08-19 18:05 - 2014-04-04 21:35 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-19 15:03 - 2014-08-19 15:03 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Machinecode_Technologies
2014-08-19 15:02 - 2014-08-19 15:02 - 00002743 _____ () C:\Users\Public\Desktop\Secure Banking.lnk
2014-08-19 15:02 - 2014-08-19 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Banking
2014-08-19 15:01 - 2014-08-19 15:01 - 00000000 ____D () C:\Program Files (x86)\Machinecode Technologies
2014-08-19 14:59 - 2014-08-19 14:59 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Downloaded Installations
2014-08-19 14:58 - 2014-08-19 14:56 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\WinZip
2014-08-19 14:58 - 2014-08-19 14:56 - 00000000 ____D () C:\ProgramData\WinZip
2014-08-19 14:57 - 2014-08-19 14:57 - 00002195 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:57 - 00002189 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-08-19 14:57 - 2014-08-19 14:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-08-19 14:56 - 2014-08-19 14:56 - 00000000 ____D () C:\Program Files\WinZip
2014-08-19 14:53 - 2014-08-19 14:53 - 58807808 _____ () C:\Users\Anton Sauer\Downloads\wz185gev-64 (1).msi
2014-08-19 14:51 - 2014-08-19 14:51 - 01915297 _____ () C:\Users\Anton Sauer\Downloads\Secure Banking v2.0.1.rar
2014-08-19 12:36 - 2014-08-19 12:04 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar (1).zip
2014-08-19 11:57 - 2014-08-19 11:57 - 00000000 ____D () C:\Windows\Tasks\360Disabled
2014-08-19 11:55 - 2014-08-19 11:55 - 29224776 _____ () C:\Users\Anton Sauer\Downloads\360TS_Setup.exe
2014-08-19 07:33 - 2014-08-19 07:33 - 00000000 ____D () C:\NBRT
2014-08-18 22:08 - 2014-08-18 22:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-18 22:04 - 2014-08-18 22:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Anton Sauer\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-18 21:56 - 2014-08-18 21:53 - 211474544 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\N360-TW-21.1.0-GE.exe
2014-08-18 21:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-18 18:53 - 2014-08-18 18:09 - 00000000 ____D () C:\NPE
2014-08-18 18:53 - 2014-08-18 17:29 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\LogMeIn Rescue Applet
2014-08-18 18:09 - 2014-08-18 17:10 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\NPE
2014-08-18 18:07 - 2014-08-18 18:07 - 00000000 ____D () C:\ProgramData\SMR410
2014-08-18 17:35 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\Abelssoft
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (2).exe
2014-08-18 17:28 - 2014-08-18 17:28 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue (1).exe
2014-08-18 15:27 - 2014-08-18 13:36 - 00000022 _____ () C:\Users\Anton Sauer\Downloads\eicar.zip
2014-08-18 15:00 - 2014-08-16 14:40 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Steganos VPN
2014-08-18 14:58 - 2014-05-03 15:14 - 00000000 ____D () C:\Program Files (x86)\G Data
2014-08-18 13:15 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-08-18 13:12 - 2014-08-18 13:12 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Symantec
2014-08-18 13:00 - 2014-08-18 13:00 - 01021808 _____ (Symantec Corporation) C:\Users\Anton Sauer\Downloads\NortonNAVDownloader.exe
2014-08-18 13:00 - 2014-08-18 13:00 - 00001259 _____ () C:\Users\Anton Sauer\Desktop\Norton-Installationsdateien.lnk
2014-08-18 13:00 - 2014-08-18 13:00 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-08-18 12:58 - 2014-05-03 15:10 - 00000000 ____D () C:\ProgramData\G Data
2014-08-18 12:52 - 2014-08-18 12:52 - 01528640 _____ (LogMeIn, Inc.) C:\Users\Anton Sauer\Downloads\Support-LogMeInRescue.exe
2014-08-18 12:31 - 2014-08-16 14:20 - 00119568 _____ () C:\Users\Anton Sauer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-16 14:44 - 2014-08-16 14:41 - 00000000 ____D () C:\Users\Anton Sauer\Documents\Steganos Safe
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Abelssoft
2014-08-16 14:33 - 2014-08-16 14:33 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-08-16 14:28 - 2014-05-03 15:15 - 00001558 _____ () C:\Users\Anton Sauer\AppData\Roaming\gdscan.log
2014-08-16 14:26 - 2014-08-16 14:26 - 00001962 _____ () C:\Windows\DPINST.LOG
2014-08-16 14:20 - 2014-08-16 14:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-15 18:46 - 2014-08-15 18:46 - 00001026 _____ () C:\Users\Gast\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000996 _____ () C:\Users\Anton Sauer\Desktop\SARDU.lnk
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:46 - 2014-08-15 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SARDU
2014-08-15 18:44 - 2014-08-15 18:35 - 14021962 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5 (1).zip
2014-08-15 18:17 - 2014-08-15 18:11 - 09203218 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip
2014-08-15 18:09 - 2014-08-15 18:01 - 00539870 _____ () C:\Users\Anton Sauer\Downloads\SARDU_2.0.6.5.zip.opdownload
2014-08-15 13:39 - 2014-08-09 16:54 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\Free Download Manager
2014-08-15 13:35 - 2014-08-15 13:35 - 00000000 ____D () C:\Windows\pss
2014-08-11 17:12 - 2014-08-19 12:03 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys
2014-08-09 17:38 - 2014-08-09 17:01 - 3192264704 _____ () C:\Users\Anton Sauer\Downloads\X15-65813.iso
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470.exe
2014-08-09 16:54 - 2014-08-09 16:54 - 07830845 _____ (FreeDownloadManager.ORG ) C:\Users\Anton Sauer\Downloads\fdminst-3.9.4.1470 (1).exe
2014-08-09 16:54 - 2014-08-09 16:54 - 00001067 _____ () C:\Users\Anton Sauer\Desktop\Free Download Manager.lnk
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-08-09 16:54 - 2014-08-09 16:54 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-08-09 16:51 - 2014-08-01 14:44 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Roaming\HpUpdate
2014-08-07 12:45 - 2014-04-05 00:22 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-08-07 04:06 - 2014-08-18 12:39 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-18 12:39 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 16:32 - 2014-08-06 16:32 - 00000000 ____D () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1)
2014-08-06 16:30 - 2014-08-06 16:30 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de (1).zip
2014-08-06 16:28 - 2014-08-06 16:28 - 02701211 _____ () C:\Users\Anton Sauer\Downloads\archer_c7v1_ug_de.zip
2014-08-04 10:12 - 2014-08-04 10:12 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-04 08:29 - 2014-08-04 08:29 - 00001116 _____ () C:\Users\Anton Sauer\Desktop\Amazon Music.lnk
2014-08-04 08:28 - 2014-08-04 08:28 - 38603216 _____ (Amazon) C:\Users\Anton Sauer\Downloads\AmazonMusicInstaller.exe
2014-08-01 16:07 - 2014-08-01 14:43 - 00000000 ____D () C:\Users\Anton Sauer\AppData\Local\HP
2014-08-01 14:47 - 2014-06-05 21:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-01 14:47 - 2014-06-05 21:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-01 14:45 - 2009-07-14 20:18 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-01 14:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-01 14:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-01 14:44 - 2014-08-01 14:44 - 00002260 _____ () C:\Users\Public\Desktop\HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00001187 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 5510d series.lnk
2014-08-01 14:44 - 2014-08-01 14:44 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\ProgramData\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files\HP
2014-08-01 14:44 - 2014-08-01 14:44 - 00000000 ____D () C:\Program Files (x86)\HP
2014-08-01 14:43 - 2014-08-01 14:42 - 58509424 _____ () C:\Users\Anton Sauer\Downloads\PS5510d_1315.exe
2014-08-01 13:45 - 2014-06-05 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-01 01:41 - 2014-08-18 12:40 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-18 12:40 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

Some content of TEMP:
====================
C:\Users\Anton Sauer\AppData\Local\Temp\pyl10B6.tmp.exe
C:\Users\Anton Sauer\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 20:47

==================== End Of Log ============================
         

--- --- ---


Betse Grüße

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?