Hallo Trojaner-Profis

Habe einen Trojaner, der Wörter grün schreibt und sie doppelt unterstreicht, außerdem öffnen sich ständig Popups.

Hier die relevanten Log-Dateien:

defogger_disable:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:02 on 01/09/2014 (Regina Mewis)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

FRST.text:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014 02
Ran by Regina Mewis (administrator) on REGINA on 01-09-2014 17:06:57
Running from C:\Users\Regina Mewis\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official  link for FRST:
 link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\ENAgent.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\V-bates\guardsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Entriq, Inc.) C:\Program Files\maxdome\DCBin\DCService.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files\V-bates\ExtensionUpdaterService.exe
(Microsoft Corporation) C:\Windows\System32\FXSSVC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(app) C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
(app) C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exe
(Systweak) C:\Program Files\ASP\AdvancedSystemProtector.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\SupTab\HpUI.exe
() C:\Program Files\SupTab\Loader32.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\V-bates\notifier.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
(CyberLink Corp.) C:\Program Files\CyberLink\YouCam\YouCamService.exe
(Microsoft Corporation) C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Intenium) C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
(Google Inc.) C:\Users\Regina Mewis\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FARNLGE.EXE


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Run: [G Data ASM] => C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [431224 2013-12-19] (G Data Software AG)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [fst_de_139] => [X]
HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [C31D876762E9834E3AD32A29087D7606DB9ADAD4._service_run] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILGE.EXE [260160 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleChromeAutoLaunch_1673F09D0EFFC8301A21AC33DF36C55D] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\MountPoints2: H - H:\LaunchU3.exe -a
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\Program Files\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [138048 2013-12-15] ()
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC542FC175C87CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1406654666&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKLM - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_aw_14_24_ch&cd=2XzuyEtN2Y1L1QzutDzzzzyCtA0ByC0A0A0B0F0E0EyE0AyEtN0D0Tzu0SzzzytCtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtB0CtCyEyDyE0FtGtBtDtDyBtGtDzzzytCtGzytAtD0EtGtAtCyCzyyCyEzy0D0CyB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDzyyD0D0CyDyBtDtGzyzzyDyDtG0B0DtAyDtGzy0EyC0BtGtB0F0B0AtDyDtB0E0FyDzz0B2QtN1B1L1H1Ezu1O2U1M1B&cr=412235727&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 
SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = 
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1408211447&from=tugs&uid=WDCXWD2500BEVS-22UST0_WD-WXC90721092210922&q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3d90709d-11c6-4139-b77d-def355537c54&apn_sauid=9FE21BEC-E99F-401B-8976-6A6596C30EDF
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
SearchScopes: HKCU - {C16DFC1C-57B8-44D6-B7F3-D4D2E223A7E9} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
BHO: Browsers App -> {11111111-1111-1111-1111-110611171187} -> C:\Program Files\Browsers App\Browsers App-bho.dll No File
BHO: videos MediaPlay-Air -> {11111111-1111-1111-1111-110611171199} -> C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-bho.dll No File
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO: V-bates -> {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} -> C:\Program Files\V-bates\Extension32.dll ()
BHO: The Amazon 1Button App for IE -> {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} -> C:\Program Files\Amazon\Amazon1ButtonApp\AmazonAppIE.dll (Amazon Inc.)
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} ->  No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: AusweisApp 1.8.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -  No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - No Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.188.1

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2014-03-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSearchURL: Default -> https://docs.google.com/offline/backgroundshell#ouid=u566ca757a5ddb2f9
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs Offline Background Page) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-06]
CHR Extension: (YouTube) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-10]
CHR Extension: (Google-Suche) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-10]
CHR Extension: (Black Menu for Google™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2013-08-31]
CHR Extension: (backgroundPage) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2013-08-31]
CHR Extension: (Google Kalender) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2013-08-31]
CHR Extension: (Google Play Music) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-06-16]
CHR Extension: (Cloudy for Gmail™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfnjfpcmnoabmbhponbioedjceaddaa [2013-12-29]
CHR Extension: (Kalender Uhr) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\galgfocamdohgeifjlbefkfpaalankfi [2014-08-09]
CHR Extension: (Google Notizen – Notizen und Listen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2014-04-28]
CHR Extension: (HelloSign: Online signatures made easy) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajjckmbclbffbpecfbiecehkfgopppd [2013-08-31]
CHR Extension: (Autodesk Homestyler) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2013-12-29]
CHR Extension: (Button für Notizen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldlehbcmklbijjlonmbbbmdobmlanegg [2014-04-28]
CHR Extension: (Skype Click to Call) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-04]
CHR Extension: (Google Mail-Checker) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-08-31]
CHR Extension: (FastestFox – Schneller browsen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-10-01]
CHR Extension: (multifolder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncfjlfpabnjllhcpgncdmbelnehboeki [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Kostenlose Spiele) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odnlkojnclefkippkkijniiobhpappnm [2013-08-31]
CHR Extension: (Quick start) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-16]
CHR Extension: (Psykopaint) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2013-08-31]
CHR Extension: (Gutscheinsammler Finder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilobbegphefikcgjpajnneiiahhejam [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-10]
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Profile 1
CHR HKLM\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Regina Mewis\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.24.0.crx [2013-05-05]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\REGINA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-06]
CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files\Amazon\ABB\AmazonChrome-bds-amzn.crx [2014-01-31]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ENAgent; C:\Windows\system32\ENAgent.exe [4209856 2013-04-30] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE [143424 2013-04-30] (SEIKO EPSON CORPORATION)
R2 ezGOSvc; C:\Windows\system32\ezGOSvc.dll [73600 2011-06-17] ()
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2009-03-31] (Teruten) [File not signed]
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [694784 2014-08-16] (Cherished Technololgy LIMITED) [File not signed]
R2 Mext Guard; C:\Program Files\V-bates\guardsvc.exe [128800 2014-06-08] () [File not signed]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19741472 2014-05-30] (NVIDIA Corporation)
R2 Prosieben; C:\Program Files\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S3 SystemExplorerHelpService; C:\Program Files\System Explorer\service\SystemExplorerService.exe [558040 2012-05-21] (Mister Group)
R2 V-bates Updater; C:\Program Files\V-bates\ExtensionUpdaterService.exe [210208 2014-06-08] () [File not signed]
S2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-06-09] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-06-09] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-06-09] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-06-09] (G Data Software AG)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-06-09] (G Data Software AG)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [648808 2011-07-06] (Realtek Semiconductor Corporation                           )
S3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3328472 2011-07-28] (Windows (R) Win 7 DDK provider)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S2 Dokan; \??\C:\Windows\system32\drivers\dokan.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\usbccid.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

NETSVC: ezGOSvc -> C:\Windows\system32\ezGOSvc.dll ()

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 17:06 - 2014-09-01 17:08 - 00025740 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-01 17:06 - 2014-09-01 17:07 - 00000000 ____D () C:\FRST
2014-09-01 17:04 - 2014-09-01 17:05 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 16:58 - 2014-09-01 17:02 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-09-01 16:21 - 2014-09-01 16:22 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Advanced System Protector
2014-08-30 18:29 - 2014-08-31 19:59 - 00001003 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-08-28 11:41 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 11:41 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-25 16:29 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-25 16:29 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-25 16:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-25 16:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:10 - 2014-08-20 22:20 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-18 18:30 - 2014-08-31 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-08-18 18:29 - 2014-08-31 19:59 - 00000000 ____D () C:\Program Files\ASP
2014-08-18 18:29 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-08-18 18:28 - 2014-09-01 16:20 - 00002352 _____ () C:\Windows\setupact.log
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:48 - 2014-08-16 22:50 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:46 - 2014-06-03 18:51 - 03103512 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-08-16 22:46 - 2014-05-19 17:16 - 02575064 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-08-16 22:46 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-08-16 22:46 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-08-16 22:46 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-08-16 22:46 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-08-16 22:46 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-08-16 22:46 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-08-16 22:46 - 2012-01-30 11:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-08-16 22:46 - 2012-01-10 10:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2014-08-16 22:46 - 2011-03-17 12:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-08-16 22:46 - 2011-03-07 17:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2014-08-16 22:46 - 2009-11-18 18:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2014-08-16 22:45 - 2014-06-03 17:07 - 01149674 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-08-16 22:45 - 2014-06-03 16:07 - 62084608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-08-16 22:45 - 2014-06-03 15:40 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-08-16 22:45 - 2014-05-29 18:11 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-08-16 22:45 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-08-16 22:45 - 2014-05-22 13:21 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-08-16 22:45 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-08-16 22:45 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-08-16 22:45 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-08-16 22:45 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-08-16 22:45 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-08-16 22:45 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-08-16 22:45 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-08-16 22:45 - 2013-10-16 03:43 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-08-16 22:45 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-08-16 22:45 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-16 22:45 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-16 22:45 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-08-16 22:45 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-08-16 22:45 - 2012-03-08 11:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2014-08-16 22:45 - 2011-11-22 16:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2014-08-16 22:45 - 2011-08-23 17:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2014-08-16 22:45 - 2010-09-27 09:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-16 22:45 - 2009-12-04 15:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2014-08-16 21:10 - 2014-08-16 21:10 - 00000000 ____D () C:\Program Files\predm
2014-08-16 20:12 - 2014-04-24 16:58 - 02148552 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28.sys
2014-08-16 20:12 - 2014-04-24 15:53 - 00382212 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-08-16 20:12 - 2013-12-17 12:26 - 00239920 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInst.dll
2014-08-16 20:12 - 2013-12-17 11:41 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2014-08-16 20:12 - 2012-05-24 09:39 - 00008192 _____ () C:\Windows\system32\Drivers\rt2860.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\rt3290.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\3290PCI4KB.bin
2014-08-16 20:07 - 2014-06-17 14:13 - 00718552 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-08-16 20:07 - 2014-06-17 14:13 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-08-16 20:07 - 2014-06-17 14:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 19:56 - 2014-09-01 16:21 - 00001766 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job
2014-08-16 19:56 - 2014-09-01 16:21 - 00001746 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job
2014-08-16 19:54 - 2014-09-01 16:21 - 00001886 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job
2014-08-16 19:54 - 2014-09-01 16:21 - 00001486 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job
2014-08-16 19:53 - 2014-09-01 16:21 - 00004158 _____ () C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job
2014-08-16 19:53 - 2014-09-01 16:21 - 00002686 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job
2014-08-16 19:52 - 2014-09-01 16:53 - 00002252 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00004496 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00003814 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job
2014-08-16 19:52 - 2014-09-01 16:21 - 00002304 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job
2014-08-16 19:51 - 2014-08-16 20:53 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Activeris
2014-08-13 20:28 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:27 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:27 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:27 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 14:16 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 14:16 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 14:16 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 14:16 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 14:16 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 14:16 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 14:16 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 14:16 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 14:16 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 14:16 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 14:16 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 14:16 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 14:16 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 14:16 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 14:16 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 14:16 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 14:16 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 14:16 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 14:16 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 14:16 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 14:16 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 14:16 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 14:16 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 14:16 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 14:16 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 14:16 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 14:16 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 14:16 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 14:16 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 14:16 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 14:16 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 14:16 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 14:15 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 14:15 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 14:15 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 14:14 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 14:14 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 14:14 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 14:14 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss
2014-08-04 18:48 - 2014-08-04 18:48 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\Skype
2014-08-04 18:46 - 2014-08-04 18:46 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-04 18:46 - 2014-08-04 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-04 16:02 - 2014-08-18 18:30 - 00000000 ____D () C:\ProgramData\Systweak

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 17:08 - 2014-09-01 17:06 - 00025740 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-01 17:07 - 2014-09-01 17:06 - 00000000 ____D () C:\FRST
2014-09-01 17:05 - 2014-09-01 17:04 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 17:02 - 2014-09-01 16:58 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 17:01 - 2014-06-11 13:01 - 00000296 _____ () C:\Windows\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}.job
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:58 - 2010-11-17 22:34 - 00000000 ____D () C:\Users\Regina Mewis
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:53 - 2014-08-16 19:52 - 00002252 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job
2014-09-01 16:52 - 2010-11-24 14:49 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-09-01 16:38 - 2013-04-26 22:49 - 00000000 ___RD () C:\Users\Regina Mewis\SkyDrive
2014-09-01 16:29 - 2012-12-30 21:56 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Youcam
2014-09-01 16:29 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-01 16:29 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-01 16:28 - 2014-07-29 19:27 - 00001852 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6.job
2014-09-01 16:27 - 2010-11-17 22:24 - 02079107 _____ () C:\Windows\WindowsUpdate.log
2014-09-01 16:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2014-09-01 16:24 - 2014-04-01 09:24 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-01 16:24 - 2014-04-01 09:24 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-01 16:24 - 2011-08-04 20:33 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job
2014-09-01 16:23 - 2013-08-06 23:25 - 00000000 ___RD () C:\Users\Regina Mewis\Google Drive
2014-09-01 16:22 - 2014-09-01 16:21 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Advanced System Protector
2014-09-01 16:21 - 2014-08-16 19:56 - 00001766 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job
2014-09-01 16:21 - 2014-08-16 19:56 - 00001746 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job
2014-09-01 16:21 - 2014-08-16 19:54 - 00001886 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job
2014-09-01 16:21 - 2014-08-16 19:54 - 00001486 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job
2014-09-01 16:21 - 2014-08-16 19:53 - 00004158 _____ () C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job
2014-09-01 16:21 - 2014-08-16 19:53 - 00002686 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00004496 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00003814 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job
2014-09-01 16:21 - 2014-08-16 19:52 - 00002304 _____ () C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job
2014-09-01 16:21 - 2014-07-29 19:31 - 00001486 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user.job
2014-09-01 16:21 - 2014-07-29 19:31 - 00001472 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5.job
2014-09-01 16:21 - 2014-07-29 19:30 - 00001306 _____ () C:\Windows\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00002060 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00001578 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1.job
2014-09-01 16:21 - 2014-07-29 19:29 - 00001382 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2.job
2014-09-01 16:21 - 2014-07-29 19:27 - 00001902 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7.job
2014-09-01 16:21 - 2014-07-29 19:27 - 00000614 _____ () C:\Windows\Tasks\22056005-f3c2-4889-9022-506ee31c6cec.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00003802 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00003120 _____ () C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3.job
2014-09-01 16:21 - 2014-07-29 19:26 - 00000900 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-01 16:21 - 2010-11-24 14:49 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-01 16:20 - 2014-08-18 18:28 - 00002352 _____ () C:\Windows\setupact.log
2014-09-01 16:20 - 2014-07-14 20:17 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-09-01 16:20 - 2012-02-23 13:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Fax
2014-09-01 16:20 - 2011-02-04 20:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-01 16:20 - 2010-11-20 22:37 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-01 16:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-01 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-31 22:19 - 2014-06-09 20:19 - 00000312 _____ () C:\Windows\Tasks\Speedial.job
2014-08-31 22:15 - 2014-07-14 21:15 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-08-31 22:15 - 2014-07-14 21:15 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-08-31 22:15 - 2012-08-08 21:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-31 22:15 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-08-31 22:13 - 2014-07-22 12:13 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-08-31 22:13 - 2014-07-22 12:13 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-08-31 21:24 - 2011-08-04 20:33 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job
2014-08-31 21:15 - 2013-07-11 10:18 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\CrashDumps
2014-08-31 19:59 - 2014-08-30 18:29 - 00001003 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-08-31 19:59 - 2014-08-18 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-08-31 19:59 - 2014-08-18 18:29 - 00000000 ____D () C:\Program Files\ASP
2014-08-31 19:57 - 2014-07-29 19:26 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-30 19:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-30 18:26 - 2009-07-14 06:33 - 00444944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 15:40 - 2014-07-29 19:25 - 00000000 ____D () C:\Program Files\Browsers App
2014-08-26 15:37 - 2013-05-05 21:11 - 00000000 ____D () C:\Program Files\Ask.com
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-26 15:33 - 2013-09-27 19:51 - 00000000 ____D () C:\Program Files\VideoLAN
2014-08-26 14:47 - 2014-07-22 12:00 - 00002209 _____ () C:\Windows\system32\ÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ
2014-08-26 14:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-23 19:54 - 2010-11-17 22:32 - 01638598 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 03:46 - 2014-08-28 11:41 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 11:41 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 22:26 - 2014-03-10 22:30 - 00000000 ____D () C:\ProgramData\tmp
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:20 - 2014-08-20 22:10 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-20 20:41 - 2014-06-27 22:22 - 00001188 _____ () C:\Users\Public\Desktop\Mein CEWE FOTOBUCH.lnk
2014-08-20 20:41 - 2014-06-27 22:22 - 00001168 _____ () C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2014-08-18 22:41 - 2013-08-14 10:53 - 00000000 ____D () C:\Users\Regina Mewis\Documents\My Digital Editions
2014-08-18 21:07 - 2013-06-28 17:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Ebooks
2014-08-18 18:55 - 2012-09-30 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-18 18:30 - 2014-08-04 16:02 - 00000000 ____D () C:\ProgramData\Systweak
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-18 16:41 - 2012-11-07 12:19 - 00000000 ____D () C:\Windows\Minidump
2014-08-18 13:00 - 2014-03-25 13:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\systweak
2014-08-17 21:38 - 2012-09-04 11:10 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\calibre
2014-08-16 22:51 - 2011-02-05 17:32 - 00000000 ___HD () C:\Program Files\Temp
2014-08-16 22:50 - 2014-08-16 22:48 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:45 - 2010-11-30 23:03 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-08-16 22:34 - 2013-08-29 16:54 - 00002263 _____ () C:\Users\Regina Mewis\Desktop\Google Chrome.lnk
2014-08-16 21:52 - 2013-09-27 19:55 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\vlc
2014-08-16 21:10 - 2014-08-16 21:10 - 00000000 ____D () C:\Program Files\predm
2014-08-16 20:59 - 2014-07-29 19:27 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\istartsurf
2014-08-16 20:59 - 2014-04-28 18:23 - 00002362 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Notizen.lnk
2014-08-16 20:59 - 2013-07-18 13:17 - 00001413 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-16 20:59 - 2013-01-09 11:48 - 00001383 _____ () C:\Users\Regina Mewis\Desktop\Internet Explorer.lnk
2014-08-16 20:53 - 2014-08-16 19:51 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Activeris
2014-08-16 20:07 - 2011-02-05 17:33 - 00000000 ____D () C:\Program Files\Realtek
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 19:58 - 2014-07-29 19:30 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-08-16 19:58 - 2014-07-29 19:29 - 00000000 ____D () C:\Program Files\SupTab
2014-08-16 17:13 - 2014-06-25 10:39 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-08-14 18:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 16:50 - 2014-05-06 22:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:41 - 2013-07-30 14:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:32 - 2010-11-19 22:48 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 19:10 - 2014-03-11 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 19:04 - 2014-06-09 17:44 - 00002012 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 20:41 - 2013-08-08 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DEUTSCHLAND SPIELT
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-10 17:46 - 2014-01-15 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-08-09 22:21 - 2010-11-24 14:47 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Skype
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss
2014-08-07 19:58 - 2014-02-20 11:08 - 00002217 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-08-07 03:43 - 2014-08-13 14:14 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 14:14 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 09:20 - 2010-11-18 21:23 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 20:20 - 2013-04-26 22:49 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-04 18:49 - 2010-11-24 14:47 - 00000000 ___RD () C:\Program Files\Skype
2014-08-04 18:48 - 2014-08-04 18:48 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\Skype
2014-08-04 18:47 - 2010-11-24 14:47 - 00000000 ____D () C:\ProgramData\Skype
2014-08-04 18:46 - 2014-08-04 18:46 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-08-04 18:46 - 2014-08-04 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-04 18:46 - 2013-04-26 20:24 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-08-04 16:18 - 2014-03-25 16:19 - 00001688 _____ () C:\Windows\system32\ASOROSet.bin
2014-08-04 16:18 - 2009-07-14 04:03 - 54525952 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-08-04 16:18 - 2009-07-14 04:03 - 23068672 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-08-04 16:18 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-08-04 16:13 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak
2014-08-04 16:09 - 2014-03-25 16:18 - 00000000 ____D () C:\Windows\system32\config\RCCBakup

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-30 19:40

==================== End Of Log ============================
         

Addtions.txt:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2014 02
Ran by Regina Mewis at 2014-09-01 17:09:51
Running from C:\Users\Regina Mewis\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.13665 - Systweak Software)
Age of Emerald (HKLM\...\Age of Emerald) (Version: 0.0.0.0 - INTENIUM GmbH)
ALDI Bestellsoftware 4.14.3 (HKLM\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Amazon 1Button App (Version: 1.0.4 - Amazon) Hidden
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
Asian Mahjong (HKLM\...\Asian Mahjong) (Version: 1.0.0.0 - INTENIUM GmbH)
AusweisApp (HKLM\...\{EE56DCD1-13FD-435B-BC4C-EE8CD83FF17A}) (Version: 1.8.0 - OpenLimit SignCubes AG)
Awakening 2: Der Mondenwald (HKLM\...\BFG-Awakening 2 - Der Mondenwald) (Version:  - )
Awakening: Schloss ohne Träume (HKLM\...\BFG-Awakening - Schloss ohne Traeume) (Version:  - )
Belkin F7D1102 Surf Wireless Micro USB Adapter (HKLM\...\{B20F9D1C-A0A5-4cd8-8306-DA03872311B1}) (Version: 1.00.0155 - )
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(G) - TOSHIBA CORPORATION)
calibre (HKLM\...\{E1E819A4-112C-454D-A3BE-FB58C60A2D80}) (Version: 1.40.0 - Kovid Goyal)
Call Of Atlantis (HKLM\...\Call Of Atlantis_is1) (Version: 1.0 - Media Contact LLC)
CCleaner (HKLM\...\CCleaner) (Version: 3.01 - Piriform)
CrystalPortal (HKLM\...\CrystalPortal_is1) (Version: 1.0 - Media Contact LLC)
Cut Out 3.0 (HKLM\...\Cut Out_is1) (Version:  - Franzis.de)
CyberLink YouCam 5 (Version: 5.0.1930 - CyberLink Corp.) Hidden
Das Biest von Lycan Isle (HKLM\...\Das Biest von Lycan Isle) (Version: 1.0.0.0 - INTENIUM GmbH)
DateiCommander 12 Kompakt (HKLM\...\DateiCommander 12 Kompakt_is1) (Version:  - Christian Lütgens, Inc.)
Der Tempel des Lebens: Die Legende der Vier Elemente (HKLM\...\Der Tempel des Lebens: Die Legende der Vier Elemente) (Version: 1.0.0.0 - INTENIUM GmbH)
Deutschland Spielt - Spiele Post (HKLM\...\Deutschland Spielt - Spiele Post) (Version: 1.0.3.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
Driver Genius (HKLM\...\Driver Genius_is1) (Version: 14.0 - Driver-Soft Inc.)
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fantasy Quest: Von Zauberern und Elfen (HKLM\...\Fantasy Quest: Von Zauberern und Elfen) (Version: 1.0.0.0 - INTENIUM GmbH)
Fences (HKLM\...\Fences) (Version:  - Stardock Corporation)
Fences (Version: 1.0 - Stardock Corporation) Hidden
Ferne Königreiche (HKLM\...\Ferne Königreiche) (Version: 1.0.0.0 - INTENIUM GmbH)
FormatFactory 3.0.1 (HKLM\...\FormatFactory) (Version: 3.0.1 - Free Time)
G Data InternetSecurity CBE (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
GameXN GO (HKCU\...\Game Organizer) (Version:  - GameXN AS)
Glitzerndes Troja (HKLM\...\Glitzerndes Troja_is1) (Version:  - Contendo Media GmbH)
Golden Path (HKLM\...\Golden Path_is1) (Version: 1.0 - Media Contact LLC)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Earth (HKLM\...\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}) (Version: 6.0.3.2197 - Google)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Haus der 1000 Türen: Familiengeheimnisse (HKLM\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)
Hexus Premium (HKLM\...\Hexus Premium) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Angel. Das Rätsel der Templer (HKLM\...\{2C08A762-6847-4B7C-AD49-1D28052E4626}_is1) (Version:  - )
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Jewel Legends: Atlantis (HKLM\...\Jewel Legends: Atlantis) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest 3 (HKLM\...\Jewel Quest 3_is1) (Version:  - FreeGamePick.com)
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
L&H TTS3000 Deutsch (HKLM\...\LHTTSGED) (Version:  - )
Legacy Tales - Der schwarze Tod (HKLM\...\Legacy Tales - Der schwarze Tod) (Version:  - )
LibreOffice 3.6 (HKLM\...\{60B2F25C-22CB-4CD9-9168-8C63708DC1A1}) (Version: 3.6.4.3 - The Document Foundation)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.95 - LSI Corporation)
Luxor Evolved (HKLM\...\Luxor Evolved) (Version: 1.0.0.0 - INTENIUM GmbH)
Magic Encyclopedia (HKLM\...\Magic Encyclopedia) (Version:  - )
Magic Encyclopedia 2 (HKLM\...\Magic Encyclopedia 2) (Version:  - )
Magic Encyclopedia 3 - Illusionen (HKLM\...\Magic Encyclopedia 3 - Illusionen) (Version:  - )
Mahjong Quest (HKLM\...\Mahjong Quest_is1) (Version: 1.0 - Media Contact LLC)
maxdome Download Manager 4.1.300.78 (HKLM\...\{E948B551-08DB-4163-8995-8C43B03D1B19}) (Version: 4.1.30078 - Prosieben)
Medion Home Cinema 10 (HKLM\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
MEDION MD86511 (HKLM\...\{1251B5BC-E285-4078-98C9-ED21F61B552A}) (Version: 1.0.0.0 - )
Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Mini Golf Pro (HKLM\...\MiniGolfPro_is1) (Version: 1.0 - Media Contact LLC)
Mortlake Mansion (HKLM\...\Mortlake Mansion_is1) (Version: 1.0 - Media Contact LLC)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Masterpiece - Moonstone (HKLM\...\{CDC21426-5E29-4FD1-84B7-391803A9FCC1}) (Version: 1.00.0000 - PurpleHills)
Mysteryville (HKLM\...\Mysteryville) (Version: 0.0.0.0 - INTENIUM GmbH)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 260.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 260.99 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PC Inspector File Recovery (HKLM\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
PC Wizard 2010.1.95 (HKLM\...\PC Wizard 2010_is1) (Version:  - CPUID)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7260 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
roomeon 3D-Planer (HKLM\...\{40BF3500-3324-4648-ADED-234FF4F82C0F}) (Version: 1.5.0 - roomeon GmbH)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
Samsung Mobile Modem Device Software (HKLM\...\Samsung Mobile Modem Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung New PC Studio (HKLM\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio Full Update (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio USB Driver Installer (HKLM\...\InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio USB Driver Installer (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version:  - )
SamsungConnectivityCableDriver (HKLM\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Season Match 3: Der Fluch der Krähe (HKLM\...\Season Match 3: Der Fluch der Krähe) (Version: 1.0.0.0 - INTENIUM GmbH)
Shadow Shelter: Im Schutz der Schatten (HKLM\...\Shadow Shelter: Im Schutz der Schatten) (Version: 2.0.0.0 - INTENIUM GmbH)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Software Updater (HKLM\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Solitaire Mystery: Die vier Jahreszeiten (HKLM\...\Solitaire Mystery: Die vier Jahreszeiten) (Version: 1.0.0.0 - INTENIUM GmbH)
Stardock Central (HKCU\...\Stardock Central) (Version:  - Stardock Corporation)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.0.3 - Synaptics Incorporated)
System Explorer 3.9.0 (HKLM\...\System Explorer_is1) (Version:  - Mister Group)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version:  - )
The Rise Of Atlantis (HKLM\...\The Rise Of Atlantis_is1) (Version:  - FreeGamePick.com)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
V-bates 2.0.0.441 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.441 - Wajamu) <==== ATTENTION
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WindowsMangerProtect20.0.0.502 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION
WISO Mein Geld 2014 Standard (HKCU\...\WISO Mein Geld 2014 Standard) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2014 Standard (Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
Wondershare Scrapbook Studio(Build 2.5.0.7) (HKLM\...\Wondershare Scrapbook Studio_is1) (Version: 2.5.0.7 - WonderShare Software Co.,Ltd.)
Zattoo4 4.0.5 (HKLM\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

13-08-2014 17:06:48 Installed Epson Event Manager
13-08-2014 18:21:30 Windows Update
16-08-2014 15:19:07 Vor der Installation neuer Treiber - 16.08.2014 17:18:57
16-08-2014 18:05:37 Installiert Realtek Ethernet Controller Driver
19-08-2014 11:33:41 Windows Update
23-08-2014 18:01:22 Windows Update
25-08-2014 14:27:42 Windows Update
26-08-2014 13:45:21 Konfiguriert lingDIALOG
28-08-2014 10:44:31 Windows Update
31-08-2014 16:39:14 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {024E7E6C-05A1-42C0-AB89-9BBE25839B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {03E98A77-1B2E-4C49-A490-C9CC11418B01} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {1126F77C-9406-4671-98D4-D3B7885986B4} - System32\Tasks\22056005-f3c2-4889-9022-506ee31c6cec => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe [2014-07-29] ()
Task: {1CF853B8-1B8E-43E6-841B-E601E9E5A779} - System32\Tasks\Advanced System Protector => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {22326729-C6CA-431C-A4CA-DDBA243A8FF8} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1 => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: {256101F4-936B-4458-A55C-DCCF9FA1CFE6} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe <==== ATTENTION
Task: {280ED10B-44CB-4762-9F73-4C75C9A1CA1E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {2E1AC54D-DDC6-4AC6-BFA9-37261F18A93B} - System32\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {3792DA74-617A-42EE-A60D-C6CF02E00AA8} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {45719E7A-B104-4585-85F7-C2E206B8E681} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe <==== ATTENTION
Task: {48D19D87-E4B2-4190-8C0D-C5F6F6C68874} - System32\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {496D60DC-C92E-4BDC-BBDF-E83955F67FDE} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google)
Task: {4A3D8BDA-3D7D-4C91-B475-64B2697C485F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1834288282-3800065426-3978100689-1000
Task: {4B012E82-D411-4C22-980F-8B0D09AC29B4} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\ASP\AdvancedSystemProtector.exe [2014-07-16] (Systweak)
Task: {4B3C818F-E986-455C-869C-69FAC9345E85} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe
Task: {578F4CE0-1317-4862-994B-F6842B65BC0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {5F885D1D-22C3-43DB-84A5-CF0ADF005BF5} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-16] (globalUpdate) <==== ATTENTION
Task: {6926A744-8ACD-4147-AEB0-BD8AA6E17466} - System32\Tasks\{3C376C5C-639C-487B-A5A1-8CE492A58C39} => C:\Program Files\Skype\\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {6D39E1B1-4319-4302-95C2-220FFFE7D03F} - System32\Tasks\{3A17E3D0-B5C7-4A47-90C1-B06DB3A50030} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/en/abandoninstall?page=tsDownload&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {72283F3C-2F65-43AC-914F-0462DA3F25B6} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {7B2AB0E4-151A-4E8E-AB5A-22830D0D5994} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe <==== ATTENTION
Task: {7B63E736-7388-4826-8475-EAC7E23FBB43} - System32\Tasks\{AE4FCB65-FA95-47DE-A953-279F1070E035} => C:\Program Files\Google\Picasa3\Picasa3.exe [2012-03-22] (Google Inc.)
Task: {7E26A6DC-652B-4800-833A-9EE3640577AB} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: {80A8B90C-D071-4A8B-B929-1C4A789407FA} - System32\Tasks\Speedial => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {880AAB1A-708D-4274-910E-F16B8D8B0D37} - System32\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {89B00E12-7561-436A-BF85-9C0319821E94} - System32\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {9C7BCEBA-7A87-46A9-90D5-D096F5C9AEC7} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat [2014-03-24] ()
Task: {9FFA1BC5-1A1E-4810-B455-52C89758E65B} - System32\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {A2E5D2B7-91F2-44EC-A19D-1C4CEA057700} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: {A3FF63B6-C21B-4733-82B9-D500664FF2EC} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1 => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe <==== ATTENTION
Task: {A51B2A3B-0F72-407F-944E-CBC887FDAE0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {A8AE6EA9-4032-4E19-80CE-EC268C38A99C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-16] (globalUpdate) <==== ATTENTION
Task: {B149F8E1-32FC-4610-8E5B-6A7418CDF358} - System32\Tasks\ASP => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {B63CE955-9E40-4559-A4B4-720886A66393} - System32\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe [2014-07-29] (app)
Task: {B8BC3CC3-F092-4544-BA45-F6074B803C33} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {CB732D78-AF42-42A1-80CC-35BBA8712F82} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {CD1CD338-9E26-4823-91D4-6B255188B8FC} - System32\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {D496756E-9CEB-4D55-B6BE-DA96DA4BB783} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {DA04B7F0-6E08-4769-9C97-4E09007C17CE} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exe [2014-07-29] (app)
Task: {DDF802B9-7274-4EAC-A0EA-0DF3F73EBD84} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {DE4FCC05-91B1-4EAF-8651-B24D2CECBC2E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {E29DF998-4B50-4F8F-B581-19412AA3136A} - System32\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E} => C:\Program Files\V-bates\PrefHelper.exe [2014-06-08] () <==== ATTENTION
Task: {ED9161FA-FE91-424E-B0F2-D12993423BC7} - System32\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {F0CA9B92-F39E-4F48-9015-BBB700FCAC44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {F4F58681-56D7-4EA9-8D47-DE2196104588} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FCC47E91-46E0-48C6-AE0D-00B024270593} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exe <==== ATTENTION
Task: {FDF71011-BEAA-43CA-9BE3-623274C72348} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe <==== ATTENTION
Task: {FE97373E-1861-4D07-BC53-A296A8A7BDEA} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: {FFC2FC16-32BF-4158-9E5E-534D53EADC7B} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\22056005-f3c2-4889-9022-506ee31c6cec.job => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
Task: C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d.job => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1.job => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exeé/QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe/tmvsVgk /QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe©/agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exeÃ/updateapp /agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Speedial.job => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-12-05 19:42 - 2010-06-17 22:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-07-17 22:00 - 2011-06-17 16:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00128800 _____ () C:\Program Files\V-bates\guardsvc.exe
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files\maxdome\DCBin\PocoXML.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00210208 _____ () C:\Program Files\V-bates\ExtensionUpdaterService.exe
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2013-02-28 14:47 - 2014-05-20 02:04 - 00106840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00087840 _____ () C:\Program Files\V-bates\libwinhook.dll
2014-07-28 18:17 - 2014-07-29 19:30 - 00086016 _____ () C:\Program Files\SupTab\WindowsSupportDll32.dll
2014-08-18 18:30 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\ASP\System.Data.SQLite.dll
2014-08-18 18:30 - 2014-07-16 18:58 - 01730936 _____ () C:\Program Files\ASP\aspsys.dll
2014-08-18 18:30 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files\ASP\UNRAR.DLL
2014-07-29 19:26 - 2014-07-29 19:26 - 00031592 _____ () C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
2014-07-28 18:17 - 2014-07-29 19:29 - 00724480 _____ () C:\Program Files\SupTab\HpUI.exe
2014-07-16 11:16 - 2014-07-16 11:16 - 00064000 _____ () C:\Program Files\SupTab\Loader32.exe
2014-07-29 19:28 - 2014-07-29 19:28 - 00132968 _____ () C:\Program Files\Browsers App\8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00411936 _____ () C:\Program Files\V-bates\notifier.exe
2014-06-11 13:01 - 2014-06-08 14:07 - 00389408 _____ () C:\Program Files\V-bates\libredir2.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00188704 _____ () C:\Program Files\V-bates\libapi2hook.dll
2014-06-11 13:01 - 2014-06-08 14:07 - 00291104 _____ () C:\Program Files\V-bates\libinject2.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00098816 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32api.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00110080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pywintypes27.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00364544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pythoncom27.dll
2014-09-01 16:21 - 2014-09-01 16:21 - 00045568 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_socket.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01160704 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_ssl.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00320512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32com.shell.shell.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00713216 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_hashlib.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01175040 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._core_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00805888 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._gdi_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00811008 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._windows_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 01062400 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._controls_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00735232 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._misc_.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00128512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_elementtree.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00127488 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pyexpat.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00557056 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\pysqlite2._sqlite.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00007168 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\hashobjs_ext.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00087552 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_ctypes.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00119808 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32file.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00108544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32security.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00018432 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32event.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00038912 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32inet.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00070656 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._html2.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00167936 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32gui.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00011264 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32crypt.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00027136 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\_multiprocessing.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00686080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\unicodedata.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00122368 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._wizard.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00010240 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\select.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00024064 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32pipe.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00025600 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32pdh.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00525640 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\windows._lib_cacheinvalidation.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00035840 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32process.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00017408 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32profile.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00022528 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\win32ts.pyd
2014-09-01 16:21 - 2014-09-01 16:21 - 00078336 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI50522\wx._animate.pyd
2014-08-16 17:05 - 2014-08-07 05:20 - 14669128 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll
2014-08-13 00:29 - 2014-08-13 00:29 - 03219456 _____ () C:\Users\Regina Mewis\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AusweisApp => C:\Program Files\AusweisApp\siqBootLoader.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: GameXN GO => "C:\ProgramData\GameXN\GameXNGO.exe" /startup
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SystemExplorerAutoStart => "C:\Program Files\System Explorer\SystemExplorer.exe" /TRAY
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Uninstall C: => 

==================== Faulty Device Manager Devices =============

Name: USB 2.0 PC Camera
Description: USB 2.0 PC Camera
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/31/2014 09:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: E_FMAILGE.DLL, Version: 0.3.1.11, Zeitstempel: 0x5137e060
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000062e0
ID des fehlerhaften Prozesses: 0x2414
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (08/31/2014 09:13:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: E_FMAILGE.DLL, Version: 0.3.1.11, Zeitstempel: 0x5137e060
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000062e0
ID des fehlerhaften Prozesses: 0x2fa0
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3


System errors:
=============
Error: (09/01/2014 04:22:12 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {BCB3CC02-761B-4C74-8B04-891A31034D19}

Error: (09/01/2014 04:21:28 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/01/2014 04:20:43 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (09/01/2014 04:20:43 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (08/31/2014 10:20:30 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst G Data Personal Firewall konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (08/31/2014 07:52:11 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (08/31/2014 07:44:50 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (08/31/2014 06:33:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (08/31/2014 06:32:53 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (08/31/2014 06:32:53 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 


Microsoft Office Sessions:
=========================
Error: (08/31/2014 09:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7E_FMAILGE.DLL0.3.1.115137e060c0000005000062e0241401cfc54fdc546786C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Windows\system32\spool\DRIVERS\W32X86\3\E_FMAILGE.DLL1ae523d6-3143-11e4-95a6-0040d0e5438a

Error: (08/31/2014 09:13:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7E_FMAILGE.DLL0.3.1.115137e060c0000005000062e02fa001cfc54f95180a50C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Windows\system32\spool\DRIVERS\W32X86\3\E_FMAILGE.DLLd75317ad-3142-11e4-95a6-0040d0e5438a


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
Percentage of memory in use: 70%
Total physical RAM: 2046.43 MB
Available physical RAM: 608.43 MB
Total Pagefile: 4092.86 MB
Available Pagefile: 1413.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.24 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:212.67 GB) (Free:115.93 GB) NTFS
Drive d: (RECOVER) (Fixed) (Total:20.11 GB) (Free:10.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0B01E1EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=212.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

G-Data Protokolldateien:

>>

Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/go/windowsupdate?_alc=1&_cb=1&_ep=1&_sd=1&adprovider=advertisecom&source=advertisecom_driverupdater-de-dt-ron⊂id=58826-mmp_1⊂id2=hier&servpixel=1409598270831_1409598256686_121_19923_160868392_1
Status: ****Der Zugriff wurde verweigert.
         

>>

}Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/go/windowsupdate?_alc=1&_cb=1&_ep=1&_sd=1&adprovider=advertisecom&source=advertisecom_driverupdater-de-dt-ron⊂id=58826-mmp_1⊂id2=hier&servpixel=1409598270831_1409598256686_121_19923_160868392_1
Status: ****Der Zugriff wurde verweigert.
         

>>

Virenprüfung von Web-Inhalten

Adresse: ****hxxp://download161bucket.com/favicon.ico
Status: ****Der Zugriff wurde verweigert.
         

Gmer.txt kann auf Grund der Größe leider nur als Anhang übersandt werden.

Da ich nun nicht der PC-Profi bin, hoffe ich, dass meine Angaben ausreichend und verständlich sind.
Freundliche Grüße

regime55

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
• Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
• Poste die Logfiles direkt in deinen Thread in Code-Tags.
• Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

• Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
• Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
• Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte deinstalliere folgende Programme (falls vorhanden) :
V-bates 2.0.0.441
WindowsMangerProtect20.0.0.502

Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen

Falls du ein Programm nicht deinstallieren kannst, lade dir von hier den Revo-uninstaller herunter und deinstalliere es damit, wähle dabei den moderaten Modus.

Schritt 2
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad.
• Starte Malwarebytes' Anti-Malware (MBAM).
• Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
• Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4
Starte noch einmal FRST.

• Setze den Haken bei addition.txt und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
• Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Hallo Sandra

Schön, dass die Hilfe so schnell kam. Ich habe alle Schritte abgearbeitet und sende nun die erforderlichen Logfiles.

mbam.txt:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 03.09.2014
Suchlauf-Zeit: 11:37:27
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.03.02
Rootkit Datenbank: v2014.08.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Regina Mewis

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgebrochen
Durchsuchte Objekte: 0
(No malicious items detected)
Verstrichene Zeit: 1 Min, 12 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

---------------------------------------------------

addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2014 02
Ran by Regina Mewis at 2014-09-03 12:38:29
Running from C:\Users\Regina Mewis\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14  (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.13665 - Systweak Software)
Age of Emerald (HKLM\...\Age of Emerald) (Version: 0.0.0.0 - INTENIUM GmbH)
ALDI Bestellsoftware 4.14.3 (HKLM\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Amazon 1Button App (Version: 1.0.4 - Amazon) Hidden
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
Asian Mahjong (HKLM\...\Asian Mahjong) (Version: 1.0.0.0 - INTENIUM GmbH)
AusweisApp (HKLM\...\{EE56DCD1-13FD-435B-BC4C-EE8CD83FF17A}) (Version: 1.8.0 - OpenLimit SignCubes AG)
Awakening 2: Der Mondenwald (HKLM\...\BFG-Awakening 2 - Der Mondenwald) (Version:  - )
Awakening: Schloss ohne Träume (HKLM\...\BFG-Awakening - Schloss ohne Traeume) (Version:  - )
Belkin F7D1102 Surf Wireless Micro USB Adapter (HKLM\...\{B20F9D1C-A0A5-4cd8-8306-DA03872311B1}) (Version: 1.00.0155 - )
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(G) - TOSHIBA CORPORATION)
calibre (HKLM\...\{E1E819A4-112C-454D-A3BE-FB58C60A2D80}) (Version: 1.40.0 - Kovid Goyal)
Call Of Atlantis (HKLM\...\Call Of Atlantis_is1) (Version: 1.0 - Media Contact LLC)
CCleaner (HKLM\...\CCleaner) (Version: 3.01 - Piriform)
CrystalPortal (HKLM\...\CrystalPortal_is1) (Version: 1.0 - Media Contact LLC)
Cut Out 3.0 (HKLM\...\Cut Out_is1) (Version:  - Franzis.de)
CyberLink YouCam 5 (Version: 5.0.1930 - CyberLink Corp.) Hidden
Das Biest von Lycan Isle (HKLM\...\Das Biest von Lycan Isle) (Version: 1.0.0.0 - INTENIUM GmbH)
DateiCommander 12 Kompakt (HKLM\...\DateiCommander 12 Kompakt_is1) (Version:  - Christian Lütgens, Inc.)
Der Tempel des Lebens: Die Legende der Vier Elemente (HKLM\...\Der Tempel des Lebens: Die Legende der Vier Elemente) (Version: 1.0.0.0 - INTENIUM GmbH)
Deutschland Spielt - Spiele Post (HKLM\...\Deutschland Spielt - Spiele Post) (Version: 1.0.3.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
Driver Genius (HKLM\...\Driver Genius_is1) (Version: 14.0 - Driver-Soft Inc.)
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fantasy Quest: Von Zauberern und Elfen (HKLM\...\Fantasy Quest: Von Zauberern und Elfen) (Version: 1.0.0.0 - INTENIUM GmbH)
Fences (HKLM\...\Fences) (Version:  - Stardock Corporation)
Fences (Version: 1.0 - Stardock Corporation) Hidden
Ferne Königreiche (HKLM\...\Ferne Königreiche) (Version: 1.0.0.0 - INTENIUM GmbH)
FormatFactory 3.0.1 (HKLM\...\FormatFactory) (Version: 3.0.1 - Free Time)
G Data InternetSecurity CBE (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
GameXN GO (HKCU\...\Game Organizer) (Version:  - GameXN AS)
Glitzerndes Troja (HKLM\...\Glitzerndes Troja_is1) (Version:  - Contendo Media GmbH)
Golden Path (HKLM\...\Golden Path_is1) (Version: 1.0 - Media Contact LLC)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Earth (HKLM\...\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}) (Version: 6.0.3.2197 - Google)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Haus der 1000 Türen: Familiengeheimnisse (HKLM\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)
Hexus Premium (HKLM\...\Hexus Premium) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Angel. Das Rätsel der Templer (HKLM\...\{2C08A762-6847-4B7C-AD49-1D28052E4626}_is1) (Version:  - )
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Jewel Legends: Atlantis (HKLM\...\Jewel Legends: Atlantis) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest 3 (HKLM\...\Jewel Quest 3_is1) (Version:  - FreeGamePick.com)
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
L&H TTS3000 Deutsch (HKLM\...\LHTTSGED) (Version:  - )
Legacy Tales - Der schwarze Tod (HKLM\...\Legacy Tales - Der schwarze Tod) (Version:  - )
LibreOffice 3.6 (HKLM\...\{60B2F25C-22CB-4CD9-9168-8C63708DC1A1}) (Version: 3.6.4.3 - The Document Foundation)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.95 - LSI Corporation)
Luxor Evolved (HKLM\...\Luxor Evolved) (Version: 1.0.0.0 - INTENIUM GmbH)
Magic Encyclopedia (HKLM\...\Magic Encyclopedia) (Version:  - )
Magic Encyclopedia 2 (HKLM\...\Magic Encyclopedia 2) (Version:  - )
Magic Encyclopedia 3 - Illusionen (HKLM\...\Magic Encyclopedia 3 - Illusionen) (Version:  - )
Mahjong Quest (HKLM\...\Mahjong Quest_is1) (Version: 1.0 - Media Contact LLC)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
maxdome Download Manager 4.1.300.78 (HKLM\...\{E948B551-08DB-4163-8995-8C43B03D1B19}) (Version: 4.1.30078 - Prosieben)
Medion Home Cinema 10 (HKLM\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
MEDION MD86511 (HKLM\...\{1251B5BC-E285-4078-98C9-ED21F61B552A}) (Version: 1.0.0.0 - )
Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Mini Golf Pro (HKLM\...\MiniGolfPro_is1) (Version: 1.0 - Media Contact LLC)
Mortlake Mansion (HKLM\...\Mortlake Mansion_is1) (Version: 1.0 - Media Contact LLC)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Masterpiece - Moonstone (HKLM\...\{CDC21426-5E29-4FD1-84B7-391803A9FCC1}) (Version: 1.00.0000 - PurpleHills)
Mysteryville (HKLM\...\Mysteryville) (Version: 0.0.0.0 - INTENIUM GmbH)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 260.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 260.99 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PC Inspector File Recovery (HKLM\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
PC Wizard 2010.1.95 (HKLM\...\PC Wizard 2010_is1) (Version:  - CPUID)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7260 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
roomeon 3D-Planer (HKLM\...\{40BF3500-3324-4648-ADED-234FF4F82C0F}) (Version: 1.5.0 - roomeon GmbH)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
Samsung Mobile Modem Device Software (HKLM\...\Samsung Mobile Modem Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung New PC Studio (HKLM\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio Full Update (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio USB Driver Installer (HKLM\...\InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio USB Driver Installer (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version:  - )
SamsungConnectivityCableDriver (HKLM\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Season Match 3: Der Fluch der Krähe (HKLM\...\Season Match 3: Der Fluch der Krähe) (Version: 1.0.0.0 - INTENIUM GmbH)
Shadow Shelter: Im Schutz der Schatten (HKLM\...\Shadow Shelter: Im Schutz der Schatten) (Version: 2.0.0.0 - INTENIUM GmbH)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Software Updater (HKLM\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Solitaire Mystery: Die vier Jahreszeiten (HKLM\...\Solitaire Mystery: Die vier Jahreszeiten) (Version: 1.0.0.0 - INTENIUM GmbH)
Stardock Central (HKCU\...\Stardock Central) (Version:  - Stardock Corporation)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.0.3 - Synaptics Incorporated)
System Explorer 3.9.0 (HKLM\...\System Explorer_is1) (Version:  - Mister Group)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version:  - )
The Rise Of Atlantis (HKLM\...\The Rise Of Atlantis_is1) (Version:  - FreeGamePick.com)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WISO Mein Geld 2014 Standard (HKCU\...\WISO Mein Geld 2014 Standard) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2014 Standard (Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
Wondershare Scrapbook Studio(Build 2.5.0.7) (HKLM\...\Wondershare Scrapbook Studio_is1) (Version: 2.5.0.7 - WonderShare Software Co.,Ltd.)
Zattoo4 4.0.5 (HKLM\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

16-08-2014 15:19:07 Vor der Installation neuer Treiber - 16.08.2014 17:18:57
16-08-2014 18:05:37 Installiert Realtek Ethernet Controller Driver
19-08-2014 11:33:41 Windows Update
23-08-2014 18:01:22 Windows Update
25-08-2014 14:27:42 Windows Update
26-08-2014 13:45:21 Konfiguriert lingDIALOG
28-08-2014 10:44:31 Windows Update
31-08-2014 16:39:14 Windows Update
03-09-2014 09:22:32 Revo Uninstaller's restore point - Advanced-System Protector
03-09-2014 09:23:50 Revo Uninstaller's restore point - V-bates 2.0.0.441
03-09-2014 09:31:02 Revo Uninstaller's restore point - V-bates 2.0.0.441

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {024E7E6C-05A1-42C0-AB89-9BBE25839B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {03E98A77-1B2E-4C49-A490-C9CC11418B01} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {1126F77C-9406-4671-98D4-D3B7885986B4} - System32\Tasks\22056005-f3c2-4889-9022-506ee31c6cec => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
Task: {1CF853B8-1B8E-43E6-841B-E601E9E5A779} - System32\Tasks\Advanced System Protector => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {22326729-C6CA-431C-A4CA-DDBA243A8FF8} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1 => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: {256101F4-936B-4458-A55C-DCCF9FA1CFE6} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe <==== ATTENTION
Task: {280ED10B-44CB-4762-9F73-4C75C9A1CA1E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {2E1AC54D-DDC6-4AC6-BFA9-37261F18A93B} - System32\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {3792DA74-617A-42EE-A60D-C6CF02E00AA8} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe <==== ATTENTION
Task: {45719E7A-B104-4585-85F7-C2E206B8E681} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe <==== ATTENTION
Task: {48D19D87-E4B2-4190-8C0D-C5F6F6C68874} - System32\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {496D60DC-C92E-4BDC-BBDF-E83955F67FDE} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google)
Task: {4A3D8BDA-3D7D-4C91-B475-64B2697C485F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1834288282-3800065426-3978100689-1000
Task: {4B3C818F-E986-455C-869C-69FAC9345E85} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe
Task: {578F4CE0-1317-4862-994B-F6842B65BC0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {5F885D1D-22C3-43DB-84A5-CF0ADF005BF5} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: {6926A744-8ACD-4147-AEB0-BD8AA6E17466} - System32\Tasks\{3C376C5C-639C-487B-A5A1-8CE492A58C39} => C:\Program Files\Skype\\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {6D39E1B1-4319-4302-95C2-220FFFE7D03F} - System32\Tasks\{3A17E3D0-B5C7-4A47-90C1-B06DB3A50030} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/en/abandoninstall?page=tsDownload&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
Task: {72283F3C-2F65-43AC-914F-0462DA3F25B6} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {7ACA6B57-D04A-4C6D-B194-A6D8D14AE7A8} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\ASP\AdvancedSystemProtector.exe [2014-07-16] (Systweak)
Task: {7B2AB0E4-151A-4E8E-AB5A-22830D0D5994} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe <==== ATTENTION
Task: {7B63E736-7388-4826-8475-EAC7E23FBB43} - System32\Tasks\{AE4FCB65-FA95-47DE-A953-279F1070E035} => C:\Program Files\Google\Picasa3\Picasa3.exe [2012-03-22] (Google Inc.)
Task: {7E26A6DC-652B-4800-833A-9EE3640577AB} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: {80A8B90C-D071-4A8B-B929-1C4A789407FA} - System32\Tasks\Speedial => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {880AAB1A-708D-4274-910E-F16B8D8B0D37} - System32\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {89B00E12-7561-436A-BF85-9C0319821E94} - System32\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {9C7BCEBA-7A87-46A9-90D5-D096F5C9AEC7} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat
Task: {9FFA1BC5-1A1E-4810-B455-52C89758E65B} - System32\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {A2E5D2B7-91F2-44EC-A19D-1C4CEA057700} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: {A3FF63B6-C21B-4733-82B9-D500664FF2EC} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1 => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe <==== ATTENTION
Task: {A51B2A3B-0F72-407F-944E-CBC887FDAE0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {A8AE6EA9-4032-4E19-80CE-EC268C38A99C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: {B149F8E1-32FC-4610-8E5B-6A7418CDF358} - System32\Tasks\ASP => C:\Program Files\RegClean Pro\SystweakASP.exe [2014-01-17] (Systweak Inc                                                ) <==== ATTENTION
Task: {B63CE955-9E40-4559-A4B4-720886A66393} - System32\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
Task: {B8BC3CC3-F092-4544-BA45-F6074B803C33} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {CB732D78-AF42-42A1-80CC-35BBA8712F82} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe <==== ATTENTION
Task: {CD1CD338-9E26-4823-91D4-6B255188B8FC} - System32\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {D496756E-9CEB-4D55-B6BE-DA96DA4BB783} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {DA04B7F0-6E08-4769-9C97-4E09007C17CE} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exe
Task: {DDF802B9-7274-4EAC-A0EA-0DF3F73EBD84} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {DE4FCC05-91B1-4EAF-8651-B24D2CECBC2E} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: {E29DF998-4B50-4F8F-B581-19412AA3136A} - System32\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E} => C:\Program Files\V-bates\PrefHelper.exe <==== ATTENTION
Task: {ED9161FA-FE91-424E-B0F2-D12993423BC7} - System32\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {F0CA9B92-F39E-4F48-9015-BBB700FCAC44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {F4F58681-56D7-4EA9-8D47-DE2196104588} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FCC47E91-46E0-48C6-AE0D-00B024270593} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exe <==== ATTENTION
Task: {FDF71011-BEAA-43CA-9BE3-623274C72348} - System32\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6 => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe <==== ATTENTION
Task: {FE97373E-1861-4D07-BC53-A296A8A7BDEA} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: {FFC2FC16-32BF-4158-9E5E-534D53EADC7B} - System32\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4 => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\22056005-f3c2-4889-9022-506ee31c6cec.job => C:\Program Files\Browsers App\22056005-f3c2-4889-9022-506ee31c6cec.exe
Task: C:\Windows\Tasks\4bad4403-9a20-4feb-b764-9caf2c6c085b.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\7cca331e-396f-40bf-8241-bd27ffe8e14d.job => C:\Program Files\Browsers App\7cca331e-396f-40bf-8241-bd27ffe8e14d.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-1.job => C:\Program Files\Browsers App\Browsers App-codedownloader.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-11.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-11.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-2.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-2.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-3.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-3.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-4.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-4.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-5_user.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-5.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-6.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-6.exeé/QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\94162637-b046-4f81-a3d0-141ad68e71cd-7.job => C:\Program Files\Browsers App\94162637-b046-4f81-a3d0-141ad68e71cd-7.exe/tmvsVgk /QxUPN='Browsers App' /ZaNABdKVC=61787 /rfMHehz='001739' /idYZrCu='verticals-' /hoNJdU='0' /NofnrLXhn=AC22A37DE7AA4AD789962B17A04C0030IE /xdMfwPsFJ=cbb4a6cc43289a9977c721daca4b756e /xdaqi=1_34_07_29 /zkCGI=1.34.7.29 /pArpzloO=1406654672 /BNMRUh=hxxp://stats.infogenservice.com /oySfG=hxxp://errors.infogenservice.com /snlsgiL=hxxp://js.infogenservice.com /YcllzA=ch /gWLZGUR /fPAENI=Browsers App /lTOQwIIBN8672e5c9-0808-45f7-b12a-7f0822bbcf9b.dll /OWVdaAab72a655-2d70-4a30-b72b-68f3c738d152.dll /BTKVFbq94162637-b046-4f81-a3d0-141ad68e71cd-64.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1.job => C:\Program Files\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6.exe©/agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.job => C:\Program Files\videos MediaPlay-Air\b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7.exeÃ/updateapp /agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=EDFA0C30FE144D89BF171BF7C01011E3IE /verifier=ace1061bc52ab9a685f989eb3eb64e8c /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408211417 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='c4d7310c-08d0-47c4-9220-650dea60d665.dll' /DllName64ToInjectToChrome='103d2c33-b79e-4f6a-8999-323a76a68e61.dll' /nova64bitexe='b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-64.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Speedial.job => C:\Users\REGINA~1\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-12-05 19:42 - 2010-06-17 22:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-07-17 22:00 - 2011-06-17 16:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files\maxdome\DCBin\PocoXML.dll
2013-02-28 14:47 - 2014-05-20 02:04 - 00106840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-16 17:05 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-16 17:04 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-09-03 12:25 - 2014-09-03 12:25 - 00098816 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32api.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00110080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\pywintypes27.dll
2014-09-03 12:25 - 2014-09-03 12:25 - 00364544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\pythoncom27.dll
2014-09-03 12:25 - 2014-09-03 12:25 - 00045568 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_socket.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 01160704 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_ssl.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00320512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32com.shell.shell.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00713216 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_hashlib.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 01175040 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._core_.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00805888 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._gdi_.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00811008 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._windows_.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 01062400 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._controls_.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00735232 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._misc_.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00128512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_elementtree.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00127488 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\pyexpat.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00557056 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\pysqlite2._sqlite.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00007168 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\hashobjs_ext.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00087552 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_ctypes.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00119808 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32file.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00108544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32security.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00018432 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32event.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00038912 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32inet.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00070656 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._html2.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00167936 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32gui.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00011264 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32crypt.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00027136 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\_multiprocessing.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00686080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\unicodedata.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00122368 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._wizard.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00010240 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\select.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00024064 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32pipe.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00025600 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32pdh.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00525640 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\windows._lib_cacheinvalidation.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00035840 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32process.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00017408 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32profile.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00022528 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\win32ts.pyd
2014-09-03 12:25 - 2014-09-03 12:25 - 00078336 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI22282\wx._animate.pyd
2014-08-18 18:30 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\ASP\System.Data.SQLite.dll
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2012-12-30 21:54 - 2011-08-24 04:39 - 00081920 _____ () C:\Program Files\CyberLink\YouCam\koan\_ctypes.pyd
2012-12-30 21:54 - 2011-08-24 04:39 - 00053248 _____ () C:\Program Files\CyberLink\YouCam\koan\_socket.pyd
2012-12-30 21:54 - 2011-08-24 04:39 - 00655360 _____ () C:\Program Files\CyberLink\YouCam\koan\_ssl.pyd
2012-12-30 21:54 - 2010-08-31 10:59 - 00057344 _____ () C:\Program Files\CyberLink\YouCam\subsys\YouCam\XUControl.dll
2012-12-30 21:54 - 2012-08-01 09:25 - 00311824 _____ () C:\Program Files\CyberLink\YouCam\subsys\YouCam\BlackCat.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AusweisApp => C:\Program Files\AusweisApp\siqBootLoader.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: GameXN GO => "C:\ProgramData\GameXN\GameXNGO.exe" /startup
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SystemExplorerAutoStart => "C:\Program Files\System Explorer\SystemExplorer.exe" /TRAY
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Uninstall C: => 

==================== Faulty Device Manager Devices =============

Name: USB 2.0 PC Camera
Description: USB 2.0 PC Camera
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/03/2014 00:17:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x2da0
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (09/03/2014 00:17:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FUCLGE.EXE, Version: 1.2.3.0, Zeitstempel: 0x524aa06e
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x2e1c
Startzeit der fehlerhaften Anwendung: 0xE_FUCLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FUCLGE.EXE1
Pfad des fehlerhaften Moduls: E_FUCLGE.EXE2
Berichtskennung: E_FUCLGE.EXE3

Error: (09/03/2014 00:17:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x27dc
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (09/03/2014 00:17:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FUCLGE.EXE, Version: 1.2.3.0, Zeitstempel: 0x524aa06e
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x85c
Startzeit der fehlerhaften Anwendung: 0xE_FUCLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FUCLGE.EXE1
Pfad des fehlerhaften Moduls: E_FUCLGE.EXE2
Berichtskennung: E_FUCLGE.EXE3

Error: (09/03/2014 00:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x2da0
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (09/03/2014 00:15:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FUCLGE.EXE, Version: 1.2.3.0, Zeitstempel: 0x524aa06e
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x2e1c
Startzeit der fehlerhaften Anwendung: 0xE_FUCLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FUCLGE.EXE1
Pfad des fehlerhaften Moduls: E_FUCLGE.EXE2
Berichtskennung: E_FUCLGE.EXE3

Error: (09/03/2014 00:13:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FINVLGE.EXE, Version: 1.2.0.0, Zeitstempel: 0x50a1a0f7
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x27dc
Startzeit der fehlerhaften Anwendung: 0xE_FINVLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FINVLGE.EXE1
Pfad des fehlerhaften Moduls: E_FINVLGE.EXE2
Berichtskennung: E_FINVLGE.EXE3

Error: (09/03/2014 00:13:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: E_FUCLGE.EXE, Version: 1.2.3.0, Zeitstempel: 0x524aa06e
Name des fehlerhaften Moduls: libwinhook.dll, Version: 0.0.0.0, Zeitstempel: 0x530dff94
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001821
ID des fehlerhaften Prozesses: 0x85c
Startzeit der fehlerhaften Anwendung: 0xE_FUCLGE.EXE0
Pfad der fehlerhaften Anwendung: E_FUCLGE.EXE1
Pfad des fehlerhaften Moduls: E_FUCLGE.EXE2
Berichtskennung: E_FUCLGE.EXE3

Error: (09/03/2014 00:04:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AVK.exe, Version: 25.0.13353.244, Zeitstempel: 0x52b2622a
Name des fehlerhaften Moduls: AVK.exe, Version: 25.0.13353.244, Zeitstempel: 0x52b2622a
Ausnahmecode: 0x40000015
Fehleroffset: 0x000045e2
ID des fehlerhaften Prozesses: 0x160c
Startzeit der fehlerhaften Anwendung: 0xAVK.exe0
Pfad der fehlerhaften Anwendung: AVK.exe1
Pfad des fehlerhaften Moduls: AVK.exe2
Berichtskennung: AVK.exe3

Error: (09/03/2014 11:52:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.14043.574, Zeitstempel: 0x52fb3224
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00d05ed8
ID des fehlerhaften Prozesses: 0x6a8
Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0
Pfad der fehlerhaften Anwendung: AVKProxy.exe1
Pfad des fehlerhaften Moduls: AVKProxy.exe2
Berichtskennung: AVKProxy.exe3


System errors:
=============
Error: (09/03/2014 00:30:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "globalUpdate Update Service (globalUpdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/03/2014 00:29:58 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (09/03/2014 00:29:58 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (09/03/2014 00:25:59 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/03/2014 00:24:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Mext Guard" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/03/2014 00:23:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/03/2014 00:23:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.

Error: (09/03/2014 00:23:15 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053GDFwSvc-Service{1DED95CA-C567-464A-B405-087EDDF0B095}

Error: (09/03/2014 10:42:53 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.183.1328.0)

Error: (09/03/2014 10:29:46 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (09/03/2014 00:17:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7libwinhook.dll0.0.0.0530dff94c0000005000018212da001cfc75feba80835C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Program Files\V-bates\libwinhook.dll7c70e087-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:17:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FUCLGE.EXE1.2.3.0524aa06elibwinhook.dll0.0.0.0530dff94c0000005000018212e1c01cfc75febac26f5C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FUCLGE.EXEC:\Program Files\V-bates\libwinhook.dll7b8b381b-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:17:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7libwinhook.dll0.0.0.0530dff94c00000050000182127dc01cfc75fa613bbe5C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Program Files\V-bates\libwinhook.dll79cfc5fc-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:17:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FUCLGE.EXE1.2.3.0524aa06elibwinhook.dll0.0.0.0530dff94c00000050000182185c01cfc75fa6254857C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FUCLGE.EXEC:\Program Files\V-bates\libwinhook.dll7909db06-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:15:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7libwinhook.dll0.0.0.0530dff94c0000005000018212da001cfc75feba80835C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Program Files\V-bates\libwinhook.dll2a53c6fb-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:15:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FUCLGE.EXE1.2.3.0524aa06elibwinhook.dll0.0.0.0530dff94c0000005000018212e1c01cfc75febac26f5C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FUCLGE.EXEC:\Program Files\V-bates\libwinhook.dll29d916ef-3353-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:13:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FINVLGE.EXE1.2.0.050a1a0f7libwinhook.dll0.0.0.0530dff94c00000050000182127dc01cfc75fa613bbe5C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FINVLGE.EXEC:\Program Files\V-bates\libwinhook.dlle6d012e8-3352-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:13:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: E_FUCLGE.EXE1.2.3.0524aa06elibwinhook.dll0.0.0.0530dff94c00000050000182185c01cfc75fa6254857C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FUCLGE.EXEC:\Program Files\V-bates\libwinhook.dlle51c6917-3352-11e4-934e-0040d0e5438a

Error: (09/03/2014 00:04:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AVK.exe25.0.13353.24452b2622aAVK.exe25.0.13353.24452b2622a40000015000045e2160c01cfc75a0e7b0772C:\Program Files\G Data\InternetSecurity\AVK\AVK.exeC:\Program Files\G Data\InternetSecurity\AVK\AVK.exeb6af72a7-3351-11e4-934e-0040d0e5438a

Error: (09/03/2014 11:52:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: AVKProxy.exe1.5.14043.57452fb3224unknown0.0.0.000000000c000000500d05ed86a801cfc7510fe2e686C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exeunknown01c2476b-3350-11e4-934e-0040d0e5438a


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
Percentage of memory in use: 75%
Total physical RAM: 2046.43 MB
Available physical RAM: 505.04 MB
Total Pagefile: 4092.86 MB
Available Pagefile: 1992.02 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:212.67 GB) (Free:116.1 GB) NTFS
Drive d: (RECOVER) (Fixed) (Total:20.11 GB) (Free:10.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0B01E1EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=212.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

FRST.txt ist für den thread zu lang, deshalb in der Anlage zu finden.

Hoffentlich bringt dies alles Aufklärung über den jämmerlichen Zustand meines PCs.


LG regime55

Hallo,

bitte hänge die Logs nicht an. Wenn sie zu groß sind, teile sie auf und poste sie in mehreren Beiträgen, mir fehlt auch noch das Log vom adwarecleaner.

Bitte poste dieses zusammen mit der nach dem Lauf des Adwarecleaners erstellten FRST.txt, danke.

Ich gelobe Besserung und werde die files aufteilen.

Hier die Logfiles:

1. adwarecleaner

# AdwCleaner v3.309 - Bericht erstellt am 05/09/2014 um 17:00:00
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Regina Mewis - REGINA
# Gestartet von : C:\Users\Regina Mewis\Downloads\Programme\System\Zubehör\adwcleaner_3.309.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : globalUpdate
[#] Dienst Gelöscht : globalUpdatem
[x] Nicht Gelöscht : IePluginServices
[#] Dienst Gelöscht : Mext Guard
[#] Dienst Gelöscht : V-bates Updater

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\IePluginServices
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\Program Files\Amazon\ABB
Ordner Gelöscht : C:\Program Files\Ask.com
Ordner Gelöscht : C:\Program Files\ASP
Ordner Gelöscht : C:\Program Files\driver-soft
[/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien
Ordner Gelöscht : C:\Program Files\globalUpdate
Ordner Gelöscht : C:\Program Files\predm
Ordner Gelöscht : C:\Program Files\RegClean Pro
Ordner Gelöscht : C:\Program Files\SupTab
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Users\Public\Documents\iWin
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Local\apn
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\LocalLow\softonic-de3
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Roaming\Activeris
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Roaming\istartsurf
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Roaming\quickclick
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Datei Gelöscht : C:\Users\Public\Desktop\Advanced System Protector.lnk
Datei Gelöscht : C:\Windows\system32\roboot.exe
Datei Gelöscht : C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal

***** [ Tasks ] *****

Task Gelöscht : Advanced System Protector
Task Gelöscht : Advanced System Protector_startup
Task Gelöscht : ASP
Task Gelöscht : globalUpdateUpdateTaskMachineCore
Task Gelöscht : globalUpdateUpdateTaskMachineUA
Task Gelöscht : LaunchSignup
Task Gelöscht : Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2
Task Gelöscht : Speedial
Task Gelöscht : 22056005-f3c2-4889-9022-506ee31c6cec
Task Gelöscht : 4bad4403-9a20-4feb-b764-9caf2c6c085b
Task Gelöscht : 7cca331e-396f-40bf-8241-bd27ffe8e14d
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-1
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-11
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-2
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-3
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-4
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-5
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-5_user
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-6
Task Gelöscht : 94162637-b046-4f81-a3d0-141ad68e71cd-7
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-1
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-11
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-2
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-3
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-4
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-5_user
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-6
Task Gelöscht : b8f5b38a-5039-4a1f-aad0-2614ad9a89c5-7
Task Gelöscht : FF Watcher {C3021DF6-D33C-40E3-BAE9-81A0DFA0378E}

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\\IePluginServices
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061787.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061787.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061787.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061787.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061799.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061799.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061799.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061799.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_java-runtime-environment_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_java-runtime-environment_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_efficient-diary_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_efficient-diary_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_expert-pdf[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_expert-pdf[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_google-pack_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_google-pack_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf-xchange-viewer[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf-xchange-viewer[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176687}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176699}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\SupHpUISoft
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Driver-Soft
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\PIP
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\supWPM
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius_is1

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

-\\ Google Chrome v37.0.2062.103

[ Datei : C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : aaaaabfjnbeinlpljodiajipidiompfl
Gelöscht [Extension] : bakijjialdiiboeaknfpmflphhmljfkd
Gelöscht [Extension] : pbjikboenpfhbbejgkoklgkhjpfogcam
Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

AdwCleaner[R0].txt - [19668 octets] - [05/09/2014 16:53:39]
AdwCleaner[S0].txt - [18832 octets] - [05/09/2014 17:00:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [18893 octets] ##########
         

2. FRST, Teil 1


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014 02
Ran by Regina Mewis (administrator) on REGINA on 05-09-2014 17:13:43
Running from C:\Users\Regina Mewis\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\ENAgent.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Entriq, Inc.) C:\Program Files\maxdome\DCBin\DCService.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corporation) C:\Windows\System32\FXSSVC.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Run: [G Data ASM] => C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [431224 2013-12-19] (G Data Software AG)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [fst_de_139] => [X]
HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [C31D876762E9834E3AD32A29087D7606DB9ADAD4._service_run] => C:\Program Files\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILGE.EXE [260160 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleChromeAutoLaunch_1673F09D0EFFC8301A21AC33DF36C55D] => C:\Program Files\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\MountPoints2: H - H:\LaunchU3.exe -a
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\Program Files\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [138048 2013-12-15] ()
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC542FC175C87CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKCU - {6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3d90709d-11c6-4139-b77d-def355537c54&apn_sauid=9FE21BEC-E99F-401B-8976-6A6596C30EDF
SearchScopes: HKCU - {C16DFC1C-57B8-44D6-B7F3-D4D2E223A7E9} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: No Name -> {11111111-1111-1111-1111-110611171187} ->  No File
BHO: No Name -> {11111111-1111-1111-1111-110611171199} ->  No File
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} ->  No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: AusweisApp 1.8.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -  No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.188.1

FireFox:
========
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSearchURL: Default -> https://docs.google.com/offline/backgroundshell#ouid=u566ca757a5ddb2f9
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs Offline Background Page) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-10]
CHR Extension: (Google-Suche) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-10]
CHR Extension: (Black Menu for Google™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2013-08-31]
CHR Extension: (backgroundPage) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2013-08-31]
CHR Extension: (Google Kalender) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2013-08-31]
CHR Extension: (Google Play Music) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-06-16]
CHR Extension: (Cloudy for Gmail™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfnjfpcmnoabmbhponbioedjceaddaa [2013-12-29]
CHR Extension: (Kalender Uhr) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\galgfocamdohgeifjlbefkfpaalankfi [2014-08-09]
CHR Extension: (Google Notizen – Notizen und Listen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2014-04-28]
CHR Extension: (HelloSign: Online signatures made easy) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajjckmbclbffbpecfbiecehkfgopppd [2013-08-31]
CHR Extension: (Autodesk Homestyler) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2013-12-29]
CHR Extension: (Button für Notizen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldlehbcmklbijjlonmbbbmdobmlanegg [2014-04-28]
CHR Extension: (Skype Click to Call) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-04]
CHR Extension: (Google Mail-Checker) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-08-31]
CHR Extension: (FastestFox – Schneller browsen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-10-01]
CHR Extension: (multifolder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncfjlfpabnjllhcpgncdmbelnehboeki [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Kostenlose Spiele) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odnlkojnclefkippkkijniiobhpappnm [2013-08-31]
CHR Extension: (Quick start) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-16]
CHR Extension: (Psykopaint) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2013-08-31]
CHR Extension: (Gutscheinsammler Finder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilobbegphefikcgjpajnneiiahhejam [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-10]
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Profile 1
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\REGINA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-06]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ENAgent; C:\Windows\system32\ENAgent.exe [4209856 2013-04-30] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE [143424 2013-04-30] (SEIKO EPSON CORPORATION)
R2 ezGOSvc; C:\Windows\system32\ezGOSvc.dll [73600 2011-06-17] ()
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2009-03-31] (Teruten) [File not signed]
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19741472 2014-05-30] (NVIDIA Corporation)
R2 Prosieben; C:\Program Files\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S3 SystemExplorerHelpService; C:\Program Files\System Explorer\service\SystemExplorerService.exe [558040 2012-05-21] (Mister Group)
S2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [X]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-06-09] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-06-09] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-06-09] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-06-09] (G Data Software AG)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-06-09] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-09-05] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [648808 2011-07-06] (Realtek Semiconductor Corporation                           )
S3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3328472 2011-07-28] (Windows (R) Win 7 DDK provider)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S2 Dokan; \??\C:\Windows\system32\drivers\dokan.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\usbccid.sys [X]

==================== NetSvcs (Whitelisted) ===================
         

2. FRST, Teil 2

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

NETSVC: ezGOSvc -> C:\Windows\system32\ezGOSvc.dll ()

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-05 17:10 - 2014-09-05 17:10 - 00018974 _____ () C:\Users\Regina Mewis\Desktop\AdwCleaner[S0].txt
2014-09-05 16:56 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-05 16:53 - 2014-09-05 17:02 - 00000000 ____D () C:\AdwCleaner
2014-09-03 12:33 - 2014-09-03 12:33 - 00001187 _____ () C:\mbam.txt
2014-09-03 12:24 - 2014-09-05 17:06 - 00002138 _____ () C:\Windows\PFRO.log
2014-09-03 11:30 - 2014-09-05 17:13 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-03 11:29 - 2014-09-03 11:29 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-03 11:29 - 2014-09-03 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:29 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 11:28 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-03 11:28 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-03 11:28 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-03 11:15 - 2014-09-03 11:18 - 00001226 _____ () C:\Users\Regina Mewis\Desktop\Revo Uninstaller.lnk
2014-09-03 11:15 - 2014-09-03 11:18 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-01 21:46 - 2014-09-01 21:46 - 00001630 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 749.html
2014-09-01 21:45 - 2014-09-01 21:45 - 00002016 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 726.html
2014-09-01 21:44 - 2014-09-01 21:44 - 00001526 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 724.html
2014-09-01 21:43 - 2014-09-01 22:22 - 00003379 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 737.html
2014-09-01 21:42 - 2014-09-01 21:42 - 00001818 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 748.html
2014-09-01 20:03 - 2014-09-01 20:03 - 00001526 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 746.html
2014-09-01 19:39 - 2014-09-01 19:39 - 00028461 _____ () C:\Users\Regina Mewis\Desktop\Gmer.txt
2014-09-01 17:36 - 2014-09-01 17:36 - 00380416 _____ () C:\Users\Regina Mewis\Desktop\Gmer-19357.exe
2014-09-01 17:09 - 2014-09-03 12:43 - 00061800 _____ () C:\Users\Regina Mewis\Desktop\Addition.txt
2014-09-01 17:06 - 2014-09-05 17:15 - 00021065 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-01 17:06 - 2014-09-05 17:13 - 00000000 ____D () C:\FRST
2014-09-01 17:04 - 2014-09-01 17:05 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 16:58 - 2014-09-01 17:02 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-08-28 11:41 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 11:41 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-25 16:29 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-25 16:29 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-25 16:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-25 16:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:10 - 2014-08-20 22:20 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-18 18:29 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-08-18 18:28 - 2014-09-05 17:06 - 00003416 _____ () C:\Windows\setupact.log
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:48 - 2014-08-16 22:50 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:46 - 2014-06-03 18:51 - 03103512 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-08-16 22:46 - 2014-05-19 17:16 - 02575064 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-08-16 22:46 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-08-16 22:46 - 2014-04-10 12:19 - 01823320 _____ (Waves  Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-08-16 22:46 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-08-16 22:46 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-08-16 22:46 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-08-16 22:46 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-08-16 22:46 - 2012-01-30 11:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-08-16 22:46 - 2012-01-10 10:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2014-08-16 22:46 - 2011-03-17 12:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-08-16 22:46 - 2011-03-07 17:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2014-08-16 22:46 - 2009-11-18 18:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2014-08-16 22:45 - 2014-06-03 17:07 - 01149674 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-08-16 22:45 - 2014-06-03 16:07 - 62084608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-08-16 22:45 - 2014-06-03 15:40 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-08-16 22:45 - 2014-05-29 18:11 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-08-16 22:45 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-08-16 22:45 - 2014-05-22 13:21 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-08-16 22:45 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-08-16 22:45 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-08-16 22:45 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-08-16 22:45 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-08-16 22:45 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-08-16 22:45 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-08-16 22:45 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-08-16 22:45 - 2013-10-16 03:43 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-08-16 22:45 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-08-16 22:45 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-16 22:45 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-16 22:45 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-08-16 22:45 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-08-16 22:45 - 2012-03-08 11:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2014-08-16 22:45 - 2011-11-22 16:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2014-08-16 22:45 - 2011-08-23 17:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2014-08-16 22:45 - 2010-09-27 09:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-16 22:45 - 2009-12-04 15:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2014-08-16 20:12 - 2014-04-24 16:58 - 02148552 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28.sys
2014-08-16 20:12 - 2014-04-24 15:53 - 00382212 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-08-16 20:12 - 2013-12-17 12:26 - 00239920 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInst.dll
2014-08-16 20:12 - 2013-12-17 11:41 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2014-08-16 20:12 - 2012-05-24 09:39 - 00008192 _____ () C:\Windows\system32\Drivers\rt2860.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\rt3290.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\3290PCI4KB.bin
2014-08-16 20:07 - 2014-06-17 14:13 - 00718552 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-08-16 20:07 - 2014-06-17 14:13 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-08-16 20:07 - 2014-06-17 14:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-13 20:28 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:27 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:27 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:27 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 14:16 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 14:16 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 14:16 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 14:16 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 14:16 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 14:16 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 14:16 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 14:16 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 14:16 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 14:16 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 14:16 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 14:16 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 14:16 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 14:16 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 14:16 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 14:16 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 14:16 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 14:16 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 14:16 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 14:16 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 14:16 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 14:16 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 14:16 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 14:16 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 14:16 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 14:16 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 14:16 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 14:16 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 14:16 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 14:16 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 14:16 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 14:16 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 14:15 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 14:15 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 14:15 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 14:14 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 14:14 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 14:14 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 14:14 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss

==================== One Month Modified Files and Folders =======
         

2. FRST, Teil 3

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-05 17:15 - 2014-09-01 17:06 - 00021065 _____ () C:\Users\Regina Mewis\Desktop\FRST.txt
2014-09-05 17:15 - 2014-07-14 21:15 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-09-05 17:15 - 2014-07-14 21:15 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-09-05 17:15 - 2012-12-30 21:56 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Youcam
2014-09-05 17:15 - 2012-08-08 21:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-05 17:15 - 2010-11-17 22:24 - 01146309 _____ () C:\Windows\WindowsUpdate.log
2014-09-05 17:15 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-09-05 17:13 - 2014-09-03 11:30 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-05 17:13 - 2014-09-01 17:06 - 00000000 ____D () C:\FRST
2014-09-05 17:13 - 2014-07-22 12:13 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-09-05 17:13 - 2014-07-22 12:13 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-09-05 17:11 - 2010-11-20 22:37 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-05 17:10 - 2014-09-05 17:10 - 00018974 _____ () C:\Users\Regina Mewis\Desktop\AdwCleaner[S0].txt
2014-09-05 17:08 - 2013-08-06 23:25 - 00000000 ___RD () C:\Users\Regina Mewis\Google Drive
2014-09-05 17:06 - 2014-09-03 12:24 - 00002138 _____ () C:\Windows\PFRO.log
2014-09-05 17:06 - 2014-08-18 18:28 - 00003416 _____ () C:\Windows\setupact.log
2014-09-05 17:06 - 2014-07-14 20:17 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-09-05 17:06 - 2012-02-23 13:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Fax
2014-09-05 17:06 - 2011-02-04 20:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-05 17:06 - 2010-11-24 14:49 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-05 17:06 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-05 17:06 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2014-09-05 17:02 - 2014-09-05 16:53 - 00000000 ____D () C:\AdwCleaner
2014-09-05 17:00 - 2014-03-25 13:53 - 00000000 ____D () C:\Program Files\Amazon
2014-09-05 17:00 - 2013-04-26 22:49 - 00000000 ___RD () C:\Users\Regina Mewis\SkyDrive
2014-09-05 16:52 - 2010-11-24 14:49 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-05 16:34 - 2011-08-04 20:33 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job
2014-09-05 16:31 - 2014-04-01 09:24 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-05 16:31 - 2014-04-01 09:24 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-05 10:43 - 2013-07-11 10:18 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\CrashDumps
2014-09-05 09:11 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-05 09:11 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-03 21:24 - 2011-08-04 20:33 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job
2014-09-03 12:43 - 2014-09-01 17:09 - 00061800 _____ () C:\Users\Regina Mewis\Desktop\Addition.txt
2014-09-03 12:33 - 2014-09-03 12:33 - 00001187 _____ () C:\mbam.txt
2014-09-03 12:25 - 2014-07-29 19:25 - 00000000 ____D () C:\Program Files\Browsers 
2014-09-03 11:29 - 2014-09-03 11:29 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-03 11:29 - 2014-09-03 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-03 11:29 - 2014-09-03 11:28 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 11:18 - 2014-09-03 11:15 - 00001226 _____ () C:\Users\Regina Mewis\Desktop\Revo Uninstaller.lnk
2014-09-03 11:18 - 2014-09-03 11:15 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-01 22:22 - 2014-09-01 21:43 - 00003379 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 737.html
2014-09-01 21:46 - 2014-09-01 21:46 - 00001630 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 749.html
2014-09-01 21:45 - 2014-09-01 21:45 - 00002016 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 726.html
2014-09-01 21:44 - 2014-09-01 21:44 - 00001526 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 724.html
2014-09-01 21:42 - 2014-09-01 21:42 - 00001818 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 748.html
2014-09-01 20:03 - 2014-09-01 20:03 - 00001526 _____ () C:\Users\Regina Mewis\Desktop\G Data Protokoll ID 746.html
2014-09-01 19:39 - 2014-09-01 19:39 - 00028461 _____ () C:\Users\Regina Mewis\Desktop\Gmer.txt
2014-09-01 17:36 - 2014-09-01 17:36 - 00380416 _____ () C:\Users\Regina Mewis\Desktop\Gmer-19357.exe
2014-09-01 17:05 - 2014-09-01 17:04 - 01096704 _____ (Farbar) C:\Users\Regina Mewis\Desktop\FRST.exe
2014-09-01 17:02 - 2014-09-01 16:58 - 00000486 _____ () C:\Users\Regina Mewis\Desktop\defogger_disable.log
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:58 - 2010-11-17 22:34 - 00000000 ____D () C:\Users\Regina Mewis
2014-09-01 16:55 - 2014-09-01 16:55 - 00050477 _____ () C:\Users\Regina Mewis\Desktop\Defogger.exe
2014-09-01 16:46 - 2014-09-01 16:46 - 01364531 _____ () C:\Users\Regina Mewis\Desktop\adwcleaner_3.308.exe
2014-09-01 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-30 19:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-30 18:26 - 2009-07-14 06:33 - 00444944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-26 15:33 - 2013-09-27 19:51 - 00000000 ____D () C:\Program Files\VideoLAN
2014-08-26 14:47 - 2014-07-22 12:00 - 00002209 _____ () C:\Windows\system32\ÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ
2014-08-26 14:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-25 06:53 - 2010-11-18 21:23 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 19:54 - 2010-11-17 22:32 - 01638598 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 03:46 - 2014-08-28 11:41 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 11:41 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 22:26 - 2014-03-10 22:30 - 00000000 ____D () C:\ProgramData\tmp
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:20 - 2014-08-20 22:10 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-20 20:41 - 2014-06-27 22:22 - 00001188 _____ () C:\Users\Public\Desktop\Mein CEWE FOTOBUCH.lnk
2014-08-18 22:41 - 2013-08-14 10:53 - 00000000 ____D () C:\Users\Regina Mewis\Documents\My Digital Editions
2014-08-18 21:07 - 2013-06-28 17:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Ebooks
2014-08-18 18:55 - 2012-09-30 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-18 16:41 - 2012-11-07 12:19 - 00000000 ____D () C:\Windows\Minidump
2014-08-17 21:38 - 2012-09-04 11:10 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\calibre
2014-08-16 22:51 - 2011-02-05 17:32 - 00000000 ___HD () C:\Program Files\Temp
2014-08-16 22:50 - 2014-08-16 22:48 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:45 - 2010-11-30 23:03 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-08-16 22:34 - 2013-08-29 16:54 - 00002263 _____ () C:\Users\Regina Mewis\Desktop\Google Chrome.lnk
2014-08-16 21:52 - 2013-09-27 19:55 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\vlc
2014-08-16 20:59 - 2014-04-28 18:23 - 00002362 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Notizen.lnk
2014-08-16 20:59 - 2013-07-18 13:17 - 00001413 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-16 20:59 - 2013-01-09 11:48 - 00001383 _____ () C:\Users\Regina Mewis\Desktop\Internet Explorer.lnk
2014-08-16 20:07 - 2011-02-05 17:33 - 00000000 ____D () C:\Program Files\Realtek
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 17:13 - 2014-06-25 10:39 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-08-14 18:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 16:50 - 2014-05-06 22:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:41 - 2013-07-30 14:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:32 - 2010-11-19 22:48 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 19:10 - 2014-03-11 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 19:04 - 2014-06-09 17:44 - 00002012 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 20:41 - 2013-08-08 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DEUTSCHLAND SPIELT
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-10 17:46 - 2014-01-15 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-08-09 22:21 - 2010-11-24 14:47 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Skype
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss
2014-08-07 19:58 - 2014-02-20 11:08 - 00002217 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-08-07 03:43 - 2014-08-13 14:14 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 14:14 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Regina Mewis\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-30 19:40

==================== End Of Log ============================
         

--- --- ---

3. Addition


[CODEAdditional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2014 02
Ran by Regina Mewis at 2014-09-05 17:17:52
Running from C:\Users\Regina Mewis\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version: - )
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Age of Emerald (HKLM\...\Age of Emerald) (Version: 0.0.0.0 - INTENIUM GmbH)
ALDI Bestellsoftware 4.14.3 (HKLM\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Amazon 1Button App (Version: 1.0.4 - Amazon) Hidden
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: - Amazon)
Asian Mahjong (HKLM\...\Asian Mahjong) (Version: 1.0.0.0 - INTENIUM GmbH)
AusweisApp (HKLM\...\{EE56DCD1-13FD-435B-BC4C-EE8CD83FF17A}) (Version: 1.8.0 - OpenLimit SignCubes AG)
Awakening 2: Der Mondenwald (HKLM\...\BFG-Awakening 2 - Der Mondenwald) (Version: - )
Awakening: Schloss ohne Träume (HKLM\...\BFG-Awakening - Schloss ohne Traeume) (Version: - )
Belkin F7D1102 Surf Wireless Micro USB Adapter (HKLM\...\{B20F9D1C-A0A5-4cd8-8306-DA03872311B1}) (Version: 1.00.0155 - )
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(G) - TOSHIBA CORPORATION)
calibre (HKLM\...\{E1E819A4-112C-454D-A3BE-FB58C60A2D80}) (Version: 1.40.0 - Kovid Goyal)
Call Of Atlantis (HKLM\...\Call Of Atlantis_is1) (Version: 1.0 - Media Contact LLC)
CCleaner (HKLM\...\CCleaner) (Version: 3.01 - Piriform)
CrystalPortal (HKLM\...\CrystalPortal_is1) (Version: 1.0 - Media Contact LLC)
Cut Out 3.0 (HKLM\...\Cut Out_is1) (Version: - Franzis.de)
CyberLink YouCam 5 (Version: 5.0.1930 - CyberLink Corp.) Hidden
Das Biest von Lycan Isle (HKLM\...\Das Biest von Lycan Isle) (Version: 1.0.0.0 - INTENIUM GmbH)
DateiCommander 12 Kompakt (HKLM\...\DateiCommander 12 Kompakt_is1) (Version: - Christian Lütgens, Inc.)
Der Tempel des Lebens: Die Legende der Vier Elemente (HKLM\...\Der Tempel des Lebens: Die Legende der Vier Elemente) (Version: 1.0.0.0 - INTENIUM GmbH)
Deutschland Spielt - Spiele Post (HKLM\...\Deutschland Spielt - Spiele Post) (Version: 1.0.3.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.0.0.46 - INTENIUM GmbH)
Epson Connect Printer Setup (HKLM\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Fantasy Quest: Von Zauberern und Elfen (HKLM\...\Fantasy Quest: Von Zauberern und Elfen) (Version: 1.0.0.0 - INTENIUM GmbH)
Fences (HKLM\...\Fences) (Version: - Stardock Corporation)
Fences (Version: 1.0 - Stardock Corporation) Hidden
Ferne Königreiche (HKLM\...\Ferne Königreiche) (Version: 1.0.0.0 - INTENIUM GmbH)
FormatFactory 3.0.1 (HKLM\...\FormatFactory) (Version: 3.0.1 - Free Time)
G Data InternetSecurity CBE (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
GameXN GO (HKCU\...\Game Organizer) (Version: - GameXN AS)
Glitzerndes Troja (HKLM\...\Glitzerndes Troja_is1) (Version: - Contendo Media GmbH)
Golden Path (HKLM\...\Golden Path_is1) (Version: 1.0 - Media Contact LLC)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Earth (HKLM\...\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}) (Version: 6.0.3.2197 - Google)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Haus der 1000 Türen: Familiengeheimnisse (HKLM\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)
Hexus Premium (HKLM\...\Hexus Premium) (Version: 1.0.0.0 - INTENIUM GmbH)
Jane Angel. Das Rätsel der Templer (HKLM\...\{2C08A762-6847-4B7C-AD49-1D28052E4626}_is1) (Version: - )
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Jewel Legends: Atlantis (HKLM\...\Jewel Legends: Atlantis) (Version: 1.0.0.0 - INTENIUM GmbH)
Jewel Quest 3 (HKLM\...\Jewel Quest 3_is1) (Version: - FreeGamePick.com)
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
L&H TTS3000 Deutsch (HKLM\...\LHTTSGED) (Version: - )
Legacy Tales - Der schwarze Tod (HKLM\...\Legacy Tales - Der schwarze Tod) (Version: - )
LibreOffice 3.6 (HKLM\...\{60B2F25C-22CB-4CD9-9168-8C63708DC1A1}) (Version: 3.6.4.3 - The Document Foundation)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.95 - LSI Corporation)
Luxor Evolved (HKLM\...\Luxor Evolved) (Version: 1.0.0.0 - INTENIUM GmbH)
Magic Encyclopedia (HKLM\...\Magic Encyclopedia) (Version: - )
Magic Encyclopedia 2 (HKLM\...\Magic Encyclopedia 2) (Version: - )
Magic Encyclopedia 3 - Illusionen (HKLM\...\Magic Encyclopedia 3 - Illusionen) (Version: - )
Mahjong Quest (HKLM\...\Mahjong Quest_is1) (Version: 1.0 - Media Contact LLC)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
maxdome Download Manager 4.1.300.78 (HKLM\...\{E948B551-08DB-4163-8995-8C43B03D1B19}) (Version: 4.1.30078 - Prosieben)
Medion Home Cinema 10 (HKLM\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
MEDION MD86511 (HKLM\...\{1251B5BC-E285-4078-98C9-ED21F61B552A}) (Version: 1.0.0.0 - )
Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Mini Golf Pro (HKLM\...\MiniGolfPro_is1) (Version: 1.0 - Media Contact LLC)
Mortlake Mansion (HKLM\...\Mortlake Mansion_is1) (Version: 1.0 - Media Contact LLC)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Masterpiece - Moonstone (HKLM\...\{CDC21426-5E29-4FD1-84B7-391803A9FCC1}) (Version: 1.00.0000 - PurpleHills)
Mysteryville (HKLM\...\Mysteryville) (Version: 0.0.0.0 - INTENIUM GmbH)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 260.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 260.99 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PC Inspector File Recovery (HKLM\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - )
PC Wizard 2010.1.95 (HKLM\...\PC Wizard 2010_is1) (Version: - CPUID)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7260 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
roomeon 3D-Planer (HKLM\...\{40BF3500-3324-4648-ADED-234FF4F82C0F}) (Version: 1.5.0 - roomeon GmbH)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version: - )
Samsung Mobile Modem Device Software (HKLM\...\Samsung Mobile Modem Device) (Version: - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version: - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version: - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version: - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version: - )
Samsung New PC Studio (HKLM\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio Full Update (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung New PC Studio USB Driver Installer (HKLM\...\InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio USB Driver Installer (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version: - )
SamsungConnectivityCableDriver (HKLM\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Season Match 3: Der Fluch der Krähe (HKLM\...\Season Match 3: Der Fluch der Krähe) (Version: 1.0.0.0 - INTENIUM GmbH)
Shadow Shelter: Im Schutz der Schatten (HKLM\...\Shadow Shelter: Im Schutz der Schatten) (Version: 2.0.0.0 - INTENIUM GmbH)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Software Updater (HKLM\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Solitaire Mystery: Die vier Jahreszeiten (HKLM\...\Solitaire Mystery: Die vier Jahreszeiten) (Version: 1.0.0.0 - INTENIUM GmbH)
Stardock Central (HKCU\...\Stardock Central) (Version: - Stardock Corporation)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.0.3 - Synaptics Incorporated)
System Explorer 3.9.0 (HKLM\...\System Explorer_is1) (Version: - Mister Group)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version: - )
The Rise Of Atlantis (HKLM\...\The Rise Of Atlantis_is1) (Version: - FreeGamePick.com)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WISO Mein Geld 2014 Standard (HKCU\...\WISO Mein Geld 2014 Standard) (Version: - Buhl Data Service GmbH)
WISO Mein Geld 2014 Standard (Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
Wondershare Scrapbook Studio(Build 2.5.0.7) (HKLM\...\Wondershare Scrapbook Studio_is1) (Version: 2.5.0.7 - WonderShare Software Co.,Ltd.)
Zattoo4 4.0.5 (HKLM\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\ProgramData\GameXN\ezGameXN.dll (GameXN AS)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1834288282-3800065426-3978100689-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points =========================

16-08-2014 18:05:37 Installiert Realtek Ethernet Controller Driver
19-08-2014 11:33:41 Windows Update
23-08-2014 18:01:22 Windows Update
25-08-2014 14:27:42 Windows Update
26-08-2014 13:45:21 Konfiguriert lingDIALOG
28-08-2014 10:44:31 Windows Update
31-08-2014 16:39:14 Windows Update
03-09-2014 09:22:32 Revo Uninstaller's restore point - Advanced-System Protector
03-09-2014 09:23:50 Revo Uninstaller's restore point - V-bates 2.0.0.441
03-09-2014 09:31:02 Revo Uninstaller's restore point - V-bates 2.0.0.441
05-09-2014 07:18:07 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {024E7E6C-05A1-42C0-AB89-9BBE25839B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {2E1AC54D-DDC6-4AC6-BFA9-37261F18A93B} - System32\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {496D60DC-C92E-4BDC-BBDF-E83955F67FDE} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google)
Task: {4A3D8BDA-3D7D-4C91-B475-64B2697C485F} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1834288282-3800065426-3978100689-1000
Task: {578F4CE0-1317-4862-994B-F6842B65BC0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {6926A744-8ACD-4147-AEB0-BD8AA6E17466} - System32\Tasks\{3C376C5C-639C-487B-A5A1-8CE492A58C39} => C:\Program Files\Skype\\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {6D39E1B1-4319-4302-95C2-220FFFE7D03F} - System32\Tasks\{3A17E3D0-B5C7-4A47-90C1-B06DB3A50030} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/en/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chromeffered-notinstalled
Task: {7B63E736-7388-4826-8475-EAC7E23FBB43} - System32\Tasks\{AE4FCB65-FA95-47DE-A953-279F1070E035} => C:\Program Files\Google\Picasa3\Picasa3.exe [2012-03-22] (Google Inc.)
Task: {880AAB1A-708D-4274-910E-F16B8D8B0D37} - System32\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {89B00E12-7561-436A-BF85-9C0319821E94} - System32\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {9FFA1BC5-1A1E-4810-B455-52C89758E65B} - System32\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {A51B2A3B-0F72-407F-944E-CBC887FDAE0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.)
Task: {B8BC3CC3-F092-4544-BA45-F6074B803C33} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {CD1CD338-9E26-4823-91D4-6B255188B8FC} - System32\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {D496756E-9CEB-4D55-B6BE-DA96DA4BB783} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe
Task: {DDF802B9-7274-4EAC-A0EA-0DF3F73EBD84} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {ED9161FA-FE91-424E-B0F2-D12993423BC7} - System32\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {F0CA9B92-F39E-4F48-9015-BBB700FCAC44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-16] (Google Inc.)
Task: {F4F58681-56D7-4EA9-8D47-DE2196104588} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\Google Software Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job => C:\Users\Regina Mewis\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-12-05 19:42 - 2010-06-17 22:56 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2011-07-17 22:00 - 2011-06-17 16:55 - 00073600 _____ () c:\windows\system32\ezgosvc.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files\maxdome\DCBin\PocoXML.dll
2013-02-28 14:47 - 2014-05-20 02:04 - 00106840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2014-09-05 17:07 - 2014-09-05 17:07 - 00098816 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32api.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00110080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\pywintypes27.dll
2014-09-05 17:07 - 2014-09-05 17:07 - 00364544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\pythoncom27.dll
2014-09-05 17:07 - 2014-09-05 17:07 - 00045568 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_socket.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 01160704 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_ssl.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00320512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32com.shell.shell.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00713216 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_hashlib.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 01175040 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._core_.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00805888 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._gdi_.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00811008 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._windows_.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 01062400 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._controls_.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00735232 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._misc_.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00128512 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_elementtree.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00127488 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\pyexpat.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00557056 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\pysqlite2._sqlite.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00007168 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\hashobjs_ext.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00087552 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_ctypes.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00119808 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32file.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00108544 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32security.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00018432 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32event.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00038912 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32inet.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00070656 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._html2.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00167936 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32gui.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00011264 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32crypt.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00027136 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\_multiprocessing.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00686080 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\unicodedata.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00122368 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._wizard.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00010240 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\select.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00024064 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32pipe.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00025600 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32pdh.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00525640 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\windows._lib_cacheinvalidation.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00035840 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32process.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00017408 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32profile.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00022528 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\win32ts.pyd
2014-09-05 17:07 - 2014-09-05 17:07 - 00078336 _____ () C:\Users\Regina Mewis\AppData\Local\Temp\_MEI36482\wx._animate.pyd
2014-09-03 21:13 - 2014-08-30 04:49 - 01098056 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\libglesv2.dll
2014-09-03 21:13 - 2014-08-30 04:49 - 00174408 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\libegl.dll
2014-09-03 21:13 - 2014-08-30 04:49 - 08577864 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll
2014-09-03 21:13 - 2014-08-30 04:49 - 00331592 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll
2014-09-03 21:13 - 2014-08-30 04:49 - 01660232 _____ () C:\Program Files\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AusweisApp => C:\Program Files\AusweisApp\siqBootLoader.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: GameXN GO => "C:\ProgramData\GameXN\GameXNGO.exe" /startup
MSCONFIG\startupreg: ITSecMng => %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SystemExplorerAutoStart => "C:\Program Files\System Explorer\SystemExplorer.exe" /TRAY
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Uninstall C: =>

==================== Faulty Device Manager Devices =============

Name: USB 2.0 PC Camera
Description: USB 2.0 PC Camera
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/05/2014 05:04:06 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (09/05/2014 10:43:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0xed0
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 10:43:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0x1710
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 10:38:41 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/05/2014 09:48:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0x1cf0
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 09:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0x1ba0
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 09:45:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0x1d08
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 09:45:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0x778
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 09:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0xfd4
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (09/05/2014 09:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 37.0.2062.103, Zeitstempel: 0x54011f26
Name des fehlerhaften Moduls: chrome_child.dll, Version: 37.0.2062.103, Zeitstempel: 0x54011edf
Ausnahmecode: 0x80000003
Fehleroffset: 0x005036b0
ID des fehlerhaften Prozesses: 0xf90
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3


System errors:
=============
Error: (09/05/2014 05:11:59 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (09/05/2014 05:11:59 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:

Error: (09/05/2014 05:07:36 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/05/2014 05:06:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "IePlugin Services" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/05/2014 05:04:51 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst G Data Personal Firewall konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (09/05/2014 04:30:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst upnphost erreicht.

Error: (09/05/2014 09:09:55 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (09/05/2014 09:05:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "globalUpdate Update Service (globalUpdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/05/2014 09:05:36 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.188.20192.168.137.0255.255.255.0

Error: (09/05/2014 09:05:36 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:


Microsoft Office Sessions:
=========================
Error: (09/05/2014 05:04:06 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (09/05/2014 10:43:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b0ed001cfc8e56a21de7dC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dllb667b76f-34d8-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 10:43:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b0171001cfc8e56a1f9485C:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dllb277a9cd-34d8-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 10:38:41 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\EPSON Software\Download Navigator\EPSDNLMW64.EXE

Error: (09/05/2014 09:48:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b01cf001cfc8ddbd6b2c7eC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dllfbb39420-34d0-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 09:47:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b01ba001cfc8dd957e8eb7C:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dlld3d79867-34d0-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 09:45:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b01d0801cfc8dd6a1c1e27C:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dlla92fa0f2-34d0-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 09:45:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b077801cfc8dd6a19fb3fC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dlla92a49ae-34d0-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 09:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b0fd401cfc8dd4f1cb634C:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dll8d4c8c69-34d0-11e4-a3eb-0040d0e5438a

Error: (09/05/2014 09:45:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe37.0.2062.10354011f26chrome_child.dll37.0.2062.10354011edf80000003005036b0f9001cfc8dd4efcaa9cC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\37.0.2062.103\chrome_child.dll8d4bc916-34d0-11e4-a3eb-0040d0e5438a


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
Percentage of memory in use: 84%
Total physical RAM: 2046.43 MB
Available physical RAM: 309.87 MB
Total Pagefile: 4092.86 MB
Available Pagefile: 1945.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1920.93 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:212.67 GB) (Free:116.35 GB) NTFS
Drive d: (RECOVER) (Fixed) (Total:20.11 GB) (Free:10.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0B01E1EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=212.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=OF Extended)

==================== End Of Log ============================][/CODE]


War das so i.O oder fehlt etwas?

LG regime55

Hallo regime55,

super, vielen Dank Sind die Probleme denn noch vorhanden?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
SearchScopes: HKCU - {6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3d90709d-11c6-4139-b77d-def355537c54&apn_sauid=9FE21BEC-E99F-401B-8976-6A6596C30EDF
BHO: No Name -> {11111111-1111-1111-1111-110611171187} ->  No File
BHO: No Name -> {11111111-1111-1111-1111-110611171199} ->  No File
AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

super, vielen Dank Sind die Probleme denn noch vorhanden?

Hallo Sandra

Erkenne meinen PC fast schon wieder. Schneller, ohne lästige popups beim surfen, keine unterstrichenen Wörter mehr. Sieht schon gut aus.

Zuarbeiten nach Anweisung:

Schritt 1

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:31-08-2014 02
Ran by Regina Mewis at 2014-09-07 17:43:42 Run:1
Running from C:\Users\Regina Mewis\Desktop\Virenentfernung
Boot Mode: Normal

==============================================

Content of fixlist:
*****************

HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
SearchScopes: HKCU - {6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=3d90709d-11c6-4139-b77d-def355537c54&apn_sauid=9FE21BEC-E99F-401B-8976-6A6596C30EDF
BHO: No Name -> {11111111-1111-1111-1111-110611171187} ->  No File
BHO: No Name -> {11111111-1111-1111-1111-110611171199} ->  No File
AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1
         
*****************

HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-19\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9}" => Key deleted successfully.
"HKCR\CLSID\{6B4D7C79-4957-4C33-BA1D-4B4EF6E2ACA9}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171187}" => Key deleted successfully.
"HKCR\CLSID\{11111111-1111-1111-1111-110611171187}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171199}" => Key deleted successfully.
"HKCR\CLSID\{11111111-1111-1111-1111-110611171199}" => Key not found.
C:\ProgramData\TEMP => ":206470A5" ADS removed successfully.
C:\ProgramData\TEMP => ":2AE74FF9" ADS removed successfully.
"AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1" => "AlternateDataStreams: C:\ProgramData\TEMP1B5B4F1" ADS not found.

==== End of Fixlog ====
         

Schritt 2

C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\File System\011\t\00\00000000	Variante von Win32/SoftPulse.J evtl. unerwünschte Anwendung	
C:\$Recycle.Bin\S-1-5-21-1834288282-3800065426-3978100689-1000\$R4R8B55\rcpsp_040801583056040864.exe	Win32/Systweak.D evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\AdvancedSystemProtector.exe.vir	MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\AspManager.exe.vir	Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Communication.dll.vir	Win32/Systweak.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\filetypehelper.exe.vir	Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\scandll.dll.vir	Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\SSDPTstub.exe.vir	Win32/Systweak.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.com.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.exe.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.pif.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\asp-fixer.scr.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\firefox.com.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\ASP\Troubleshooter\iexplore.exe.vir	MSIL/AdvancedSystemProtector.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro\SSDPTstub.exe.vir	Win32/Systweak.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro\systweakasp.exe.vir	MSIL/AdvancedSystemProtector.D evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\DpInterface32.dll.vir	Win32/Thinknice.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\DpInterface64.dll.vir	Win64/Thinknice.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\Loader32.exe.vir	Win32/Thinknice.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\Loader64.exe.vir	Win64/Thinknice.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\RSHP.exe.vir	Win32/ELEX.AV evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SearchProtect32.dll.vir	Win32/Thinknice.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SearchProtect64.dll.vir	Win64/Thinknice.F evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupIePluginServiceUpdate.exe.vir	Win32/ELEX.AV evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\uninstall.exe.vir	Win32/Thinknice.E evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Program Files\SupTab\WindowsSupportDll64.dll.vir	Win64/Thinknice.D evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir	Win32/ELEX.AV evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir	Variante von Win32/ELEX.AM evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Users\Regina Mewis\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir	Win32/Systweak.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\AdwCleaner\Quarantine\C\Windows\system32\roboot.exe.vir	Variante von Win32/Systweak.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Program Files\FormatFactory\FormatFactory\FFSetup3.0.1.1.exe	Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\AppData\Local\Temp\is-VG8G5.tmp\sasnative32.exe	Win32/AdvancedSystemProtector.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\AppData\Local\Tracker Software\LiveUpdate\Updates\PDFXVwer_2210.exe	Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\Data\Multimedia\Bücher\Calibre ZipOpenerSetup.exe	Win32/InstallCore.BN evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\Downloads\Programme\Büro\Shockwave_Installer_Slim.exe	Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\Downloads\Programme\Multimedia\Player Setup.exe	Variante von Win32/SoftPulse.J evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Users\Regina Mewis\Downloads\Programme\System\Zubehör\COMPUTER_BILD-Download-Manager_fuer_ConnectifyInstaller.exe	Variante von Win32/Injected.F Trojaner	Gesäubert durch Löschen - in Quarantäne kopiertC:\Users\Regina Mewis\Downloads\Programme\System\Zubehör\flashplayerpro-setup.exe	Win32/DownloadAdmin.G evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Windows\System32\pc-wizard_2010.1.961-setup.exe	Variante von Win32/Bundled.Toolbar.Ask.A potenziell unsichere Anwendung	gelöscht - in Quarantäne kopiert
C:\Windows\System32\sasnative32.exe	Win32/AdvancedSystemProtector.A evtl. unerwünschte Anwendung	gelöscht - in Quarantäne kopiert
C:\Windows\System32\Adobe\Shockwave 12\gt.exe	Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung	gelöscht - in Quarantäne kopiert
         

Schritt 3

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014
Ran by Regina Mewis (administrator) on REGINA on 08-09-2014 04:48:25
Running from C:\Users\Regina Mewis\Desktop\Virenentfernung
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\ENAgent.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Entriq, Inc.) C:\Program Files\maxdome\DCBin\DCService.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\FXSSVC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files\Google\Chrome\\chrome.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATILGE.EXE
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Chrome\\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files\Google\Chrome\\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
(CyberLink Corp.) C:\Program Files\CyberLink\YouCam\YouCamService.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Microsoft Corporation) C:\Users\Regina Mewis\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Google Inc.) C:\Users\Regina Mewis\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Intenium) C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Run: [G Data ASM] => C:\Program Files\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [431224 2013-12-19] (G Data Software AG)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [fst_de_139] => [X]
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [C31D876762E9834E3AD32A29087D7606DB9ADAD4._service_run] => C:\Program Files\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATILGE.EXE [260160 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\Run: [GoogleChromeAutoLaunch_1673F09D0EFFC8301A21AC33DF36C55D] => C:\Program Files\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1834288282-3800065426-3978100689-1000\...\MountPoints2: H - H:\LaunchU3.exe -a
AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\Program Files\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [138048 2013-12-15] ()
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC542FC175C87CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKCU - {C16DFC1C-57B8-44D6-B7F3-D4D2E223A7E9} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} ->  No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: AusweisApp 1.8.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -  No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.188.1

FireFox:
========
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Regina Mewis\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> https://docs.google.com/offline/backgroundshell#ouid=u566ca757a5ddb2f9
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs Offline Background Page) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-10]
CHR Extension: (Google-Suche) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-10]
CHR Extension: (Black Menu for Google™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\eignhdfgaldabilaaegmdfbajngjmoke [2013-08-31]
CHR Extension: (backgroundPage) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2013-08-31]
CHR Extension: (Google Kalender) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2013-08-31]
CHR Extension: (Google Play Music) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-06-16]
CHR Extension: (Cloudy for Gmail™) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfnjfpcmnoabmbhponbioedjceaddaa [2013-12-29]
CHR Extension: (Kalender Uhr) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\galgfocamdohgeifjlbefkfpaalankfi [2014-08-09]
CHR Extension: (Google Notizen – Notizen und Listen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2014-04-28]
CHR Extension: (HelloSign: Online signatures made easy) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajjckmbclbffbpecfbiecehkfgopppd [2013-08-31]
CHR Extension: (Autodesk Homestyler) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2013-12-29]
CHR Extension: (Button für Notizen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldlehbcmklbijjlonmbbbmdobmlanegg [2014-04-28]
CHR Extension: (Skype Click to Call) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-04]
CHR Extension: (Google Mail-Checker) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-08-31]
CHR Extension: (FastestFox – Schneller browsen) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-10-01]
CHR Extension: (multifolder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncfjlfpabnjllhcpgncdmbelnehboeki [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Kostenlose Spiele) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\odnlkojnclefkippkkijniiobhpappnm [2013-08-31]
CHR Extension: (Quick start) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-16]
CHR Extension: (Psykopaint) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2013-08-31]
CHR Extension: (Gutscheinsammler Finder) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilobbegphefikcgjpajnneiiahhejam [2013-08-31]
CHR Extension: (Google Mail) - C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-10]
CHR CustomProfile: C:\Users\Regina Mewis\AppData\Local\Google\Chrome\User Data\Profile 1
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\REGINA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-06]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ENAgent; C:\Windows\system32\ENAgent.exe [4209856 2013-04-30] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RP7.EXE [143424 2013-04-30] (SEIKO EPSON CORPORATION)
R2 ezGOSvc; C:\Windows\system32\ezGOSvc.dll [73600 2011-06-17] ()
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2009-03-31] (Teruten) [File not signed]
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19741472 2014-05-30] (NVIDIA Corporation)
R2 Prosieben; C:\Program Files\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S3 SystemExplorerHelpService; C:\Program Files\System Explorer\service\SystemExplorerService.exe [558040 2012-05-21] (Mister Group)
S2 DokanMounter; C:\Program Files\COMPUTERBILD-Cloud\Data\Tools\mounter.exe [X]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-06-09] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-06-09] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-06-09] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-06-09] (G Data Software AG)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-06-09] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-09-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [648808 2011-07-06] (Realtek Semiconductor Corporation                           )
S3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3328472 2011-07-28] (Windows (R) Win 7 DDK provider)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S2 Dokan; \??\C:\Windows\system32\drivers\dokan.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\usbccid.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

NETSVC: ezGOSvc -> C:\Windows\system32\ezGOSvc.dll ()

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-08 04:47 - 2014-09-08 04:48 - 00000000 ____D () C:\FRST
2014-09-06 21:22 - 2014-09-06 21:22 - 00000000 ____D () C:\Program Files\ESET
2014-09-05 17:58 - 2014-09-08 04:48 - 00000000 ____D () C:\Users\Regina Mewis\Desktop\Virenentfernung
2014-09-05 16:56 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-05 16:53 - 2014-09-05 17:02 - 00000000 ____D () C:\Program Files\AdwCleaner
2014-09-03 12:33 - 2014-09-03 12:33 - 00001187 _____ () C:\mbam.txt
2014-09-03 12:24 - 2014-09-05 17:06 - 00002138 _____ () C:\Windows\PFRO.log
2014-09-03 11:30 - 2014-09-08 04:24 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-03 11:29 - 2014-09-03 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:29 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 11:28 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-03 11:28 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-03 11:28 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-03 11:15 - 2014-09-03 11:18 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-01 17:06 - 2014-09-07 22:41 - 00000000 ____D () C:\Program Files\FRST
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-08-28 11:41 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 11:41 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-25 16:29 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-25 16:29 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-25 16:29 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-25 16:29 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-25 16:28 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-25 16:28 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:10 - 2014-08-20 22:20 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-18 18:28 - 2014-09-08 04:17 - 00003752 _____ () C:\Windows\setupact.log
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:48 - 2014-08-16 22:50 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:46 - 2014-06-03 18:51 - 03103512 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-08-16 22:46 - 2014-05-19 17:16 - 02575064 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-08-16 22:46 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-08-16 22:46 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-08-16 22:46 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-08-16 22:46 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-08-16 22:46 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-08-16 22:46 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-08-16 22:46 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-08-16 22:46 - 2012-01-30 11:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-08-16 22:46 - 2012-01-10 10:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2014-08-16 22:46 - 2011-09-02 14:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2014-08-16 22:46 - 2011-03-17 12:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-08-16 22:46 - 2011-03-07 17:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2014-08-16 22:46 - 2009-11-24 09:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2014-08-16 22:46 - 2009-11-18 18:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2014-08-16 22:45 - 2014-06-03 17:07 - 01149674 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-08-16 22:45 - 2014-06-03 16:07 - 62084608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-08-16 22:45 - 2014-06-03 15:40 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-08-16 22:45 - 2014-05-29 18:11 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-08-16 22:45 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-08-16 22:45 - 2014-05-22 13:21 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-08-16 22:45 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-08-16 22:45 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-08-16 22:45 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-08-16 22:45 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-08-16 22:45 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-08-16 22:45 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-08-16 22:45 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-08-16 22:45 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-08-16 22:45 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-08-16 22:45 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-08-16 22:45 - 2013-10-16 03:43 - 00182472 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-08-16 22:45 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-08-16 22:45 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-08-16 22:45 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-16 22:45 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-16 22:45 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-08-16 22:45 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2014-08-16 22:45 - 2012-08-31 19:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2014-08-16 22:45 - 2012-03-08 11:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2014-08-16 22:45 - 2011-11-22 16:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2014-08-16 22:45 - 2011-08-23 17:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2014-08-16 22:45 - 2011-05-31 09:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2014-08-16 22:45 - 2010-11-08 07:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2014-08-16 22:45 - 2010-09-27 09:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-16 22:45 - 2009-12-04 15:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2014-08-16 20:12 - 2014-04-24 16:58 - 02148552 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28.sys
2014-08-16 20:12 - 2014-04-24 15:53 - 00382212 _____ () C:\Windows\system32\Drivers\FW7650.bin
2014-08-16 20:12 - 2013-12-17 12:26 - 00239920 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInst.dll
2014-08-16 20:12 - 2013-12-17 11:41 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2014-08-16 20:12 - 2012-05-24 09:39 - 00008192 _____ () C:\Windows\system32\Drivers\rt2860.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\rt3290.bin
2014-08-16 20:12 - 2012-05-24 09:39 - 00004096 _____ () C:\Windows\system32\Drivers\3290PCI4KB.bin
2014-08-16 20:07 - 2014-06-17 14:13 - 00718552 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-08-16 20:07 - 2014-06-17 14:13 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-08-16 20:07 - 2014-06-17 14:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-13 20:28 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:27 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:27 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:27 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 14:16 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 14:16 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 14:16 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 14:16 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 14:16 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 14:16 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 14:16 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 14:16 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 14:16 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 14:16 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 14:16 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 14:16 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 14:16 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 14:16 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 14:16 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 14:16 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 14:16 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 14:16 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 14:16 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 14:16 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 14:16 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 14:16 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 14:16 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 14:16 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 14:16 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 14:16 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 14:16 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 14:16 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 14:16 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 14:16 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 14:16 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 14:16 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 14:16 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 14:15 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 14:15 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 14:15 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 14:15 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 14:14 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 14:14 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 14:14 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 14:14 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 14:14 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-08 04:48 - 2014-09-08 04:47 - 00000000 ____D () C:\FRST
2014-09-08 04:48 - 2014-09-05 17:58 - 00000000 ____D () C:\Users\Regina Mewis\Desktop\Virenentfernung
2014-09-08 04:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2014-09-08 04:30 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-08 04:30 - 2009-07-14 06:34 - 00022848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-08 04:28 - 2013-04-26 22:49 - 00000000 ___RD () C:\Users\Regina Mewis\SkyDrive
2014-09-08 04:26 - 2012-12-30 21:56 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Youcam
2014-09-08 04:25 - 2010-11-17 22:24 - 01205405 _____ () C:\Windows\WindowsUpdate.log
2014-09-08 04:24 - 2014-09-03 11:30 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-08 04:24 - 2014-04-01 09:24 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-08 04:24 - 2014-04-01 09:24 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1C4F898C-6C4D-4C65-AA54-04311C30BFAD}.job
2014-09-08 04:24 - 2011-08-04 20:33 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000UA.job
2014-09-08 04:22 - 2010-11-20 22:37 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-08 04:19 - 2013-08-06 23:25 - 00000000 ___RD () C:\Users\Regina Mewis\Google Drive
2014-09-08 04:18 - 2010-11-24 14:49 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-08 04:17 - 2014-08-18 18:28 - 00003752 _____ () C:\Windows\setupact.log
2014-09-08 04:17 - 2014-07-14 20:17 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-09-08 04:17 - 2012-02-23 13:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Fax
2014-09-08 04:17 - 2011-02-04 20:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-08 04:17 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-07 22:41 - 2014-09-01 17:06 - 00000000 ____D () C:\Program Files\FRST
2014-09-07 22:15 - 2014-07-14 21:15 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-09-07 22:15 - 2014-07-14 21:15 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {9CACE44F-32AD-4C79-B024-71FC0CD02948}.job
2014-09-07 22:15 - 2012-08-08 21:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-07 22:15 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-09-07 22:13 - 2014-07-22 12:13 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-09-07 22:13 - 2014-07-22 12:13 - 00000731 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {1675FE88-8384-4682-80A4-D5EBFBCDE4CA}.job
2014-09-07 21:52 - 2010-11-24 14:49 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-07 21:39 - 2014-07-29 19:25 - 00000000 ____D () C:\Program Files\Browsers App
2014-09-07 21:24 - 2011-08-04 20:33 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1834288282-3800065426-3978100689-1000Core.job
2014-09-07 20:23 - 2013-07-11 10:18 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\CrashDumps
2014-09-07 19:04 - 2010-11-17 22:32 - 01638598 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 21:22 - 2014-09-06 21:22 - 00000000 ____D () C:\Program Files\ESET
2014-09-05 17:06 - 2014-09-03 12:24 - 00002138 _____ () C:\Windows\PFRO.log
2014-09-05 17:02 - 2014-09-05 16:53 - 00000000 ____D () C:\Program Files\AdwCleaner
2014-09-05 17:00 - 2014-03-25 13:53 - 00000000 ____D () C:\Program Files\Amazon
2014-09-03 12:33 - 2014-09-03 12:33 - 00001187 _____ () C:\mbam.txt
2014-09-03 11:29 - 2014-09-03 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-03 11:29 - 2014-09-03 11:28 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-03 11:28 - 2014-09-03 11:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 11:18 - 2014-09-03 11:15 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-01 16:58 - 2014-09-01 16:58 - 00000000 _____ () C:\Users\Regina Mewis\defogger_reenable
2014-09-01 16:58 - 2010-11-17 22:34 - 00000000 ____D () C:\Users\Regina Mewis
2014-09-01 16:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-30 19:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-30 18:26 - 2009-07-14 06:33 - 00444944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 15:34 - 2014-08-26 15:34 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-26 15:34 - 2014-08-26 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-26 15:33 - 2013-09-27 19:51 - 00000000 ____D () C:\Program Files\VideoLAN
2014-08-26 14:47 - 2014-07-22 12:00 - 00002209 _____ () C:\Windows\system32\ÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ
2014-08-26 14:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-25 06:53 - 2010-11-18 21:23 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 03:46 - 2014-08-28 11:41 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 11:41 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 22:26 - 2014-03-10 22:30 - 00000000 ____D () C:\ProgramData\tmp
2014-08-20 22:20 - 2014-08-20 22:20 - 00001113 _____ () C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2014-08-20 22:20 - 2014-08-20 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI Bestellsoftware
2014-08-20 22:20 - 2014-08-20 22:10 - 00000000 ____D () C:\Program Files\ALDI Bestellsoftware
2014-08-20 20:41 - 2014-06-27 22:22 - 00001188 _____ () C:\Users\Public\Desktop\Mein CEWE FOTOBUCH.lnk
2014-08-18 22:41 - 2013-08-14 10:53 - 00000000 ____D () C:\Users\Regina Mewis\Documents\My Digital Editions
2014-08-18 21:07 - 2013-06-28 17:25 - 00000000 ____D () C:\Users\Regina Mewis\Documents\Ebooks
2014-08-18 18:55 - 2012-09-30 11:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-18 18:28 - 2014-08-18 18:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-18 16:41 - 2012-11-07 12:19 - 00000000 ____D () C:\Windows\Minidump
2014-08-17 21:38 - 2012-09-04 11:10 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\calibre
2014-08-16 22:51 - 2011-02-05 17:32 - 00000000 ___HD () C:\Program Files\Temp
2014-08-16 22:50 - 2014-08-16 22:48 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-08-16 22:45 - 2010-11-30 23:03 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-08-16 22:34 - 2013-08-29 16:54 - 00002263 _____ () C:\Users\Regina Mewis\Desktop\Google Chrome.lnk
2014-08-16 21:52 - 2013-09-27 19:55 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\vlc
2014-08-16 20:59 - 2014-04-28 18:23 - 00002362 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Notizen.lnk
2014-08-16 20:59 - 2013-07-18 13:17 - 00001413 _____ () C:\Users\Regina Mewis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-16 20:59 - 2013-01-09 11:48 - 00001383 _____ () C:\Users\Regina Mewis\Desktop\Internet Explorer.lnk
2014-08-16 20:07 - 2011-02-05 17:33 - 00000000 ____D () C:\Program Files\Realtek
2014-08-16 20:04 - 2014-08-16 20:04 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Local\com
2014-08-16 17:13 - 2014-06-25 10:39 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-08-14 18:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 16:50 - 2014-05-06 22:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:41 - 2013-07-30 14:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:32 - 2010-11-19 22:48 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 19:10 - 2014-03-11 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-08-13 19:05 - 2014-08-13 19:05 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-08-13 19:04 - 2014-06-09 17:44 - 00002012 _____ () C:\Users\Public\Desktop\G Data InternetSecurity CBE.lnk
2014-08-10 20:41 - 2014-08-10 20:41 - 00001235 _____ () C:\Users\Public\Desktop\Asian Mahjong.lnk
2014-08-10 20:41 - 2013-08-08 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DEUTSCHLAND SPIELT
2014-08-10 17:46 - 2014-08-10 17:46 - 00001134 _____ () C:\Users\Regina Mewis\Desktop\Mahjong Quest.lnk
2014-08-10 17:46 - 2014-01-15 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2014-08-09 22:21 - 2010-11-24 14:47 - 00000000 ____D () C:\Users\Regina Mewis\AppData\Roaming\Skype
2014-08-09 16:47 - 2014-08-09 16:47 - 00000000 ____D () C:\Windows\pss

Some content of TEMP:
====================
C:\Users\Regina Mewis\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-07 16:34

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

sagt regime55

Hallo,

du hättest das mit Eset nicht gleich löschen brauchen .

Ein letzter kleiner Fix
Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\Regina Mewis\AppData\Local\Temp\Quarantine.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

OK
So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1

Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2
Downloade dir bitte delfix auf deinen Desktop.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.
• DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.

Falls nach Delfix noch Programme aus unserer Bereinigung vorhanden sein sollten, kannst du diese nun bedenkenlos löschen.

Updates / Programme aktualisieren
Du solltest bitte dein Pythonprogramm woanders draus laufen lassen, das befindet sich in deinen temporären Ordnern, wenn du nun diese Ordner mittels Dateinträgerbereinigung oder auch nem anderen Cleaner bereinigen lässt, dann ist das mit weg.

• FlashPlayer

Deine FlashPlayer für Firefox und den Internet Explorer sind nicht mehr aktuell.

• Deinstalliere die alten Versionen.
• Öffne nacheinander mit beiden Browsern folgenden Link Adobe - Adobe Flash Player installieren und lade Dir von dort die neueste Version herunter.
• Falls sich dort etwas anderes als der FlashPlayer noch zusätzlich mitinstallieren möchte, entferne den Haken dort.

Aktualisierung einstellen
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen:
Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen

• Java

Dein Java ist nicht mehr aktuell.
Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.
Sofern du Java nicht zwingend benötigst, solltest du es komplett deinstallieren.

Windows XP
Gehe auf:
Start --> Systemsteuerung --> Software --> Javaversionen auswählen --> entfernen
Windows Vista
Gehe auf:
Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> Javaversionen suchen --> entfernen
Windows 7
Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Javaversionen auswählen --> entfernen
Windows 8
Dazu drücke auf:
Windowstaste und X
dann:
Programme und Funktionen -->Javaversionen auswählen --> entfernen

Falls du Java doch unbedingt benötigst, dann

• Downloade dir bitte die neueste Java-Version von hier
• Speichere die jxpiinstall.exe
• Schließe alle laufenden Programme. Speziell deinen Browser.
• Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 67 ) herunter laden.
• Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
• Wenn die Installation beendet wurde
  Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
• Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

• Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
• Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
• Klicke auf Dateien löschen....
• Gehe sicher das überall ein Haken gesetzt ist und klicke OK.
• Klicke erneut OK.

und sorge dafür, dass Java automatisch updated.
Dazu:

• öffne Java
• klicke auf den Reiter Update
• klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
• klicke auf Erweitert
• ändere das Intervall mindestens auf wöchentlich

und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür

• verwende für jede Anwendung und jeden Account ein anderes Passwort
• ändere regelmäßig dein Passwort, vor allem bei Onlinebanking oder deinem Emailpostfach ist dieses sehr wichtig
• speichere keine Passwörter auf deinem PC, gib diese nicht an dritte weiter
• ein sicheres Passwort besteht aus mindestens 8 Zeichen und beinhaltet Groß- und Kleinbuchstaben, Zahlen, und Sonderzeichen
• benutze keine Zahlen- oder Buchstabenkombinationen, ( zB 12345678, qwertzui) auch keine Zahlen oder Buchstabenmuster
• verwende keine Passwörter die einen Bezug zu dir, deinem Wohnort, Familienmitglied oder Haustier (Geburtsdatum, Postleitzahl, Adresse, Name) haben

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.

• Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.

Antivirensoftware

• Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz

• MalwareBytes Anti-Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
  Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu die Datenträgerbereinigung von Windows.
Windows Vista

• Klicke unten links auf das Vistasymbol
• Gehe auf Programme -> Zubehör -> Systemprogramme -> Datenträgerbereinigung
• Wähle nun Dateien von allen Benutzern des Computers aus und bestätige mit OK
• Setze den Haken bei den zu löschenden Dateien zusätzlich bei Temporäre Dateien
• Bestätige mit OK
• Bestätige dass du die Dateien unwiderruflich löschen möchtest

Windows 7

• Gehe auf das Windowsstartsymbol
• Gebe im Suchfeld Datenträgerrereinigung ein
• Setze den Haken zusätzlich bei Temporäre Dateien
• Bestätige mit OK

Windows 8

• Rechtsklicke in die untere linke Ecke deines Bildschirms
• Klicke auf Suchen
• Klicke auf Einstellungen
• Gebe im Suchfeld Datenträgerbereinigung ein
• Klicke in den Einstellungen auf der linken Seite nun auf Speicherplatz durch Löschen nicht erforderlicher Dateien freigeben
• Setze den Haken zusätzlich bei Temporäre Dateien
• Bestätige mit OK
• Bestätige dass du die Dateien unwiderruflich löschen möchtest

Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
• Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Es hat leider etwas gedauert mit der Bearbeitung aller Hinweise, weil einiges davon erst zusammengekramt werden musste, aber... nun haben wir's.

Eset-Onlinescan hatte ich ja bereits entfernt, Malwarebytes habe ich auf Deinen Rat hin in Premium umgewandelt und bin sehr zufrieden damit.
Die Programme aus der Bereinigung sind auch entfernt. Das Phytonprogramm war nicht mehr auffindbar, vielleicht schon vorher entfernt.
Die Aktualisierung von Flashplayer und JAVA ist erledigt, automatische updates eingestellt.
Nach Neustart habe ich nun nur noch das Problem, dass mein Browser irgendwie schwächelt.
Es dauert ewig, bis er Seiten aufbaut und es erscheint jedes Mal ein Popup mit Trauersmily und dem Vermerk "Seite kann nicht geöffnet werden...warten oder abbrechen?" Aber dann öffnet sich die Seite doch. Irgendwie merkwürdig.
Leider habe ich mich mit Google Chrome ziemlich verbandelt (nutze gmail, driver, picasa, Kalender, Notizen, cloudy und synchronisiere auch mit meinem Smartphone). Ein Wechsel auf Alternativ-Browser würde ich nicht wirklich gern vornehmen.

Aber die gute Nachricht = Malware und andere Bösartigkeiten scheinen weg zu sein.
Vielen Dank für die fachmännische Begleitung und eine kleine Spende ist unterwegs.

liebe Grüße regime55

Hallo,

setz den mal zurück und schau, ob es dann besser wird. Es kann natürlich sein, dass das Problem darin begründet ist.

Öffne Google Chrome.

• Klicke auf das Chrome-Menü (rechts im Browser).
• Wähle "Einstellungen" in dem Menü aus.
• Scrolle nach unten und klicke "Erweiterte Einstellungen anzeigen" an.
• Nun werden dir weitere Optionen angezeigt. Wähle aus (letzter Punkt der Einstellungsmöglichkeiten).
• Ein Fenster wird geöffnet. Klicke auf "Zurücksetzen".
• Jetzt werden deine aktuellen Browsereinstellungen auf die Standardeinstellungen zurückgesetzt.