Problem bei Internetbrowser/ Werbung und falsche Anzeige

illertal · 02.09.2014, 19:11

Hallo

Ich habe ein riesen Problem.
Wenn ich in einen Internet Browser gehe egal welchen (Mozilla,Chrome..)
kommen auf allen Seiten Werbungen am Rand es öffnen sich auch einfach Fenster mit Werbung und manche Seiten sind meines erachtens anderst aufgebaut warum auch immer.
Adblocker bringt auch nichts.

Auf meinem Rechner sind kaum Programme
Bilder, Videos Musik sind keine auf vorhanden auser Srtandart.
Ich kann mir wirklich nicht erklären woher das kommen lönnte.
Ich hoffe einer von euch kann mir Helfen

Ps: Treiber sind Aktuell Antivirus läuft auch (Aviar)

Mein Pc:

Turm (eigenbau)
Windwos 7 Pro 64bit
Intel i5 4400
ASRock b85M Pro4

schrauber · 02.09.2014, 19:16

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

illertal · 02.09.2014, 19:26

Ich hoffe es war so richtig !?

schrauber · 03.09.2014, 10:44

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

illertal · 03.09.2014, 16:59

Es wird jetzt immer schlimmer.
Jetzt kommt auf jeder seite ein Skriptfehler und die Seiten dauern ewig bis sie aufgebaut sind
Manche seiten werden garnicht mehr ganz angezeigt sondern abgeschnitten. Der Pc läuft allgemein nicht mehr so wie er sollte

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2014 02
Ran by Manuel at 2014-09-02 20:21:20
Running from C:\Users\Manuel\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ArmA3Sync 1.2.48 (HKLM-x32\...\{F097E7D7-D093-4394-9EED-43AFCCD12B7A}_is1) (Version: 1.2.48 - The [S.o.E] team)
Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
click-n-mark (HKLM-x32\...\D47D42CE-5C4D-4D13-6C59-89B1C124C2ED) (Version:  - click-n-mark-software)
DriverToolkit version 8.3.5.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.3.5.0 - Megaify Software)
eDealsPop version 1.0 (HKLM-x32\...\eDealsPop_is1) (Version: 1.0 - eDealsPop)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hotspot Shield 3.42 (HKLM-x32\...\HotspotShield) (Version: 3.42 - AnchorFree Inc.)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Network Connections 18.5.54.0 (Version: 18.5.54.0 - Intel) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045F0}) (Version: 7.0.450 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
XFast LAN v9.05 (HKLM\...\XFast LAN) (Version: 9.05 - cFos Software GmbH, Bonn)
XFastUSB (HKLM-x32\...\XFastUSB) (Version: 3.02.38 - ASRock Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3223253173-3750158342-2206101293-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

27-08-2014 12:40:46 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 12:41:24 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 12:42:02 DirectX wurde installiert
27-08-2014 12:45:57 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 12:46:53 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 13:08:56 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 13:09:24 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 13:34:38 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 13:34:57 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 13:35:08 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 13:35:25 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 13:42:57 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 13:43:25 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
27-08-2014 17:38:43 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
27-08-2014 17:39:08 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
28-08-2014 00:24:06 Windows Update
02-09-2014 01:02:28 Installed Java 7 Update 67
02-09-2014 14:32:19 Windows Update
02-09-2014 15:21:46 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0B04702C-9F34-43AD-AB16-B0027288C65D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {17E1647D-7D8E-4E8F-AEDB-FE7384A6409D} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5_user => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-5.exe <==== ATTENTION
Task: {1AA8B83D-CD38-43E5-9BBF-93973B9AFDAC} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-7.exe <==== ATTENTION
Task: {1F01208B-8D1A-4A07-BA49-526575DFF66F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {234B60A0-F2B8-4DE2-848B-5F93E8C471FC} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe [2014-07-26] (Megaify Software Co., Ltd.)
Task: {272857AC-4FCC-4E71-B53A-A651A911EC99} - System32\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d => C:\Program Files (x86)\CinemaBig-1.1\691b443b-3804-4d92-be7b-0f43ca34789d.exe <==== ATTENTION
Task: {39130EEB-6E90-44BD-AE8B-62D5454A4689} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-2.exe <==== ATTENTION
Task: {5818B53F-A4CF-4060-9ABA-21863D4469E9} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-4.exe <==== ATTENTION
Task: {668AE961-C223-43B6-985D-3D1899217C12} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1 => C:\Program Files (x86)\CinemaBig-1.1\CinemaBig-1.1-codedownloader.exe <==== ATTENTION
Task: {70F20CA1-5135-4C6B-9B74-94D81D218259} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-04] (Google Inc.)
Task: {7A350B76-25EC-4A4A-959D-1D1C2787A994} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-11.exe <==== ATTENTION
Task: {89B88D18-9B71-4642-8915-9AB501CE00EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-15] (Adobe Systems Incorporated)
Task: {89C83575-7370-418B-95A6-0ED902B3DC6A} - System32\Tasks\click-n-mark Update => C:\Program Files (x86)\ver2click-n-mark\B8click-n-marke91.exe
Task: {8C5D3B67-46EC-48A9-9631-9F4C66739ABD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-04] (Google Inc.)
Task: {9A5FF641-9556-4D64-A062-0B548E22576B} - System32\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-4.exe <==== ATTENTION
Task: {A26CE09E-6E17-48B9-A5D4-4018D4FF968E} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-6.exe <==== ATTENTION
Task: {A578A72A-6234-4998-95A5-BA1F8214CE00} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-16] (globalUpdate) <==== ATTENTION
Task: {AC6EAF1B-28B9-4186-A25B-F65960991FEB} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-5.exe <==== ATTENTION
Task: {C8156A82-6568-4ED6-9678-1E35949E968E} - System32\Tasks\click-n-mark_wd => C:\Program Files (x86)\ver2click-n-mark\N7click-n-markQ.exe
Task: {D6CF930F-6A1B-4D5D-9255-ECB7ED521834} - System32\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541 => C:\Program Files (x86)\CinemaBig-1.1\b568c771-f890-4a93-8b7d-7b13e41e9541.exe <==== ATTENTION
Task: {DA06ADCA-9E52-4A62-9FD0-2920C0C5E9F6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {FD019DEE-BF99-4361-BD65-9228007EF060} - System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3 => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-4.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1.job => C:\Program Files (x86)\CinemaBig-1.1\CinemaBig-1.1-codedownloader.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-11.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-2.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-3.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-4.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-5.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5_user.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-5.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-6.exe’/agentregpath='CinemaBig-1.1-nv' /appid=63163 /srcid='001980' /subid='0' /zdata='0' /bic=6DB8CEB4BAE6444C8968ACCA07502813IE /verifier=5b52a881dbcabb0dd8c595733f5dde81 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408189336 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='9c306f33-d331-477a-b0ce-f9b66e837529.dll' /DllName64ToInjectToChrome='ffb76fa1-1ab4-443c-8032-1e785c60e3f7.dll' /nova64bitexe='54df1f61-9037-4087-b55f-d9b40945efe5-64.exe
Task: C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7.job => C:\Program Files (x86)\CinemaBig-1.1\54df1f61-9037-4087-b55f-d9b40945efe5-7.exe¬/updateapp /agentregpath='CinemaBig-1.1-nv' /appid=63163 /srcid='001980' /subid='0' /zdata='0' /bic=6DB8CEB4BAE6444C8968ACCA07502813IE /verifier=5b52a881dbcabb0dd8c595733f5dde81 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408189336 /statsdomain=hxxp://stats.inputdatacloud.com /errorsdomain=hxxp://errors.inputdatacloud.com /codedownloaddomain=hxxp://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='9c306f33-d331-477a-b0ce-f9b66e837529.dll' /DllName64ToInjectToChrome='ffb76fa1-1ab4-443c-8032-1e785c60e3f7.dll' /nova64bitexe='54df1f61-9037-4087-b55f-d9b40945efe5-64.exe
Task: C:\Windows\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d.job => C:\Program Files (x86)\CinemaBig-1.1\691b443b-3804-4d92-be7b-0f43ca34789d.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541.job => C:\Program Files (x86)\CinemaBig-1.1\b568c771-f890-4a93-8b7d-7b13e41e9541.exe
Task: C:\Windows\Tasks\click-n-mark Update.job => C:\Program Files (x86)\ver2click-n-mark\B8click-n-marke91.exe
Task: C:\Windows\Tasks\click-n-mark_wd.job => C:\Program Files (x86)\ver2click-n-mark\N7click-n-markQ.exe
Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-17 00:34 - 2014-05-17 00:34 - 00430344 _____ () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
2014-08-16 13:42 - 2014-08-12 13:05 - 03354616 _____ () C:\Users\Manuel\AppData\Local\fst_de_137\upfst_de_137.exe
2014-08-16 13:42 - 2014-07-17 14:14 - 00007168 _____ () C:\Program Files (x86)\eDealsPop\eDealsPop.exe
2014-08-25 17:22 - 2014-08-30 18:33 - 00355328 _____ () C:\ProgramData\NetworkHostTask\vxhost.exe
2014-09-02 17:14 - 2014-02-17 19:13 - 00092984 _____ () C:\Program Files (x86)\DriverToolkit\zlibwapi.dll
2014-05-17 02:11 - 2014-05-17 02:11 - 00908584 _____ () C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll
2014-05-17 02:37 - 2014-05-17 02:37 - 00506664 _____ () C:\Program Files (x86)\Hotspot Shield\bin\HssRep.dll
2014-09-02 03:11 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-09-02 03:11 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-09-02 03:11 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-09-02 03:11 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-09-02 03:11 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-05-16 19:05 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Manuel\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-30 05:15 - 2014-09-02 19:35 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-08-15 23:43 - 2014-08-15 23:43 - 17048240 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/02/2014 07:44:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 05:28:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 04:39:51 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C008
SKU-ID=da22eadd-46dc-4056-a287-f5041c852470

Error: (09/02/2014 04:39:51 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0xC004C008

Error: (09/02/2014 04:36:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 04:35:50 PM) (Source: MsiInstaller) (EventID: 11719) (User: Manuel-PC)
Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

Error: (09/02/2014 04:35:50 PM) (Source: MsiInstaller) (EventID: 11719) (User: Manuel-PC)
Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

Error: (09/02/2014 03:41:26 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C008
SKU-ID=da22eadd-46dc-4056-a287-f5041c852470

Error: (09/02/2014 03:41:26 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0xC004C008

Error: (09/02/2014 03:39:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/02/2014 07:44:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UpdaterSvcFralimbo" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 07:44:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Okiitan" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 07:44:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "FileGUIProcess.exe" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 07:44:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "IePlugin Services" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 05:28:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UpdaterSvcFralimbo" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 05:28:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Okiitan" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 05:28:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "FileGUIProcess.exe" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 05:28:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "IePlugin Services" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/02/2014 05:22:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/02/2014 05:22:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.


Microsoft Office Sessions:
=========================
Error: (09/02/2014 07:44:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 05:28:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 04:39:51 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0xC004C008da22eadd-46dc-4056-a287-f5041c852470

Error: (09/02/2014 04:39:51 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0xC004C00800010001(0x00000000, 16:39:50:959 - hxxp://go.microsoft.com/fwlink/?LinkID=88341)
00020001(0x00000000, 16:39:50:959)
00030001(0x00000000, 16:39:50:959 - hxxp://go.microsoft.com)
00030002(0x00000000, 16:39:50:959 - 1)
00020005(0x00000000, 16:39:50:959 - 0)
0002000C(0x00000000, 16:39:51:147 - 302)
0002000E(0x00000000, 16:39:51:147 - https://activation.sls.microsoft.com/sllicensing/SLLicense.asmx)
00020001(0x00000000, 16:39:51:147)
00030001(0x00000000, 16:39:51:147 - https://activation.sls.microsoft.com)
00030002(0x00000000, 16:39:51:147 - 1)
00020005(0x00000000, 16:39:51:147 - 0)
0002000C(0x00000000, 16:39:51:724 - 500)
00010002(0x8004FC01, 16:39:51:724 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C008</HRESULT><Messages><Message>113 (Activation) - [PA Maximum unlock exceeded.  ---&gt; Maximum unlock exceeded]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 16:39:51:724)

Error: (09/02/2014 04:36:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2014 04:35:50 PM) (Source: MsiInstaller) (EventID: 11719) (User: Manuel-PC)
Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (09/02/2014 04:35:50 PM) (Source: MsiInstaller) (EventID: 11719) (User: Manuel-PC)
Description: Product: Community Smartbar -- Error 1719. The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (09/02/2014 03:41:26 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0xC004C008da22eadd-46dc-4056-a287-f5041c852470

Error: (09/02/2014 03:41:26 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0xC004C00800010001(0x00000000, 15:41:26:071 - hxxp://go.microsoft.com/fwlink/?LinkID=88341)
00020001(0x00000000, 15:41:26:071)
00030001(0x00000000, 15:41:26:071 - hxxp://go.microsoft.com)
00030002(0x00000000, 15:41:26:071 - 1)
00020005(0x00000000, 15:41:26:071 - 0)
0002000C(0x00000000, 15:41:26:259 - 302)
0002000E(0x00000000, 15:41:26:259 - https://activation.sls.microsoft.com/sllicensing/SLLicense.asmx)
00020001(0x00000000, 15:41:26:259)
00030001(0x00000000, 15:41:26:259 - https://activation.sls.microsoft.com)
00030002(0x00000000, 15:41:26:259 - 1)
00020005(0x00000000, 15:41:26:259 - 0)
0002000C(0x00000000, 15:41:26:836 - 500)
00010002(0x8004FC01, 15:41:26:851 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C008</HRESULT><Messages><Message>113 (Activation) - [PA Maximum unlock exceeded.  ---&gt; Maximum unlock exceeded]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 15:41:26:851)

Error: (09/02/2014 03:39:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz
Percentage of memory in use: 31%
Total physical RAM: 7845.09 MB
Available physical RAM: 5380.2 MB
Total Pagefile: 15688.36 MB
Available Pagefile: 12896.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:848.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 152CF908)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2014 02
Ran by Manuel (administrator) on MANUEL-PC on 02-09-2014 20:20:49
Running from C:\Users\Manuel\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Megaify Software Co., Ltd.) C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(globalUpdate) C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NetWork Host Corporation) C:\ProgramData\Online\sv.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbarsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
() C:\Users\Manuel\AppData\Local\fst_de_137\upfst_de_137.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
( ) C:\Program Files (x86)\RadioRage_4j\bar\1.bin\AppIntegrator64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\eDealsPop\eDealsPop.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
() C:\ProgramData\NetworkHostTask\vxhost.exe
() C:\ProgramData\NetworkHostTask\vxhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13636824 2013-07-26] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [2009952 2013-05-31] (cFos Software GmbH)
HKLM\...\Run: [RadioRage Home Page Guard 64 bit] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\AppIntegrator64.exe [485960 2014-06-21] ( )
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [6311104 2014-05-16] (FNet Co., Ltd.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [RadioRage EPM Support] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jmedint.exe [12872 2014-06-21] (Mindspark Interactive Network, Inc.)
HKLM-x32\...\Run: [RadioRage Search Scope Monitor] => C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jSrchMn.exe [55368 2014-06-21] (Mindspark)
HKLM-x32\...\Run: [fst_de_137] => "C:\Program Files (x86)\fst_de_137\fst_de_137.exe"
HKLM-x32\...\Run: [eDealsPop] => C:\Program Files (x86)\eDealsPop\eDealsPop.exe [7168 2014-07-17] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\RunOnce: [upfst_de_137.exe] => C:\Users\Manuel\AppData\Local\fst_de_137\upfst_de_137.exe [3354616 2014-08-12] ()
Winlogon\Notify\igfxcui: igfxdev.dll [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3223253173-3750158342-2206101293-1000\...\Run: [Browser Infrastructure Helper] => C:\Users\Manuel\AppData\Local\Smartbar\Application\Smartbar.exe startup
HKU\S-1-5-21-3223253173-3750158342-2206101293-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-3223253173-3750158342-2206101293-1000\...\MountPoints2: {bef9602d-dd27-11e3-85fc-806e6f6e6963} - D:\ASRSetup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:21010
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istart123.com/?type=hp&ts=1408189361&from=ymb&uid=ST1000DM003-1CH162_Z1DB4CTQXXXXZ1DB4CTQ
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istart123.com/?type=sc&ts=1408189361&from=ymb&uid=ST1000DM003-1CH162_Z1DB4CTQXXXXZ1DB4CTQ
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: click-n-mark -> {6FE9C928-9470-5648-CDD8-F3A11B1209D8} -> C:\Program Files (x86)\ver2click-n-mark\177_x64.dll No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} ->  No File
BHO-x32: click-n-mark -> {6FE9C928-9470-5648-CDD8-F3A11B1209D8} -> C:\Program Files (x86)\ver2click-n-mark\177.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @RadioRage_4j.com/Plugin -> C:\Program Files (x86)\RadioRage_4j\bar\1.bin\NP4jStub.dll (Mindspark)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\user.js
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\istart123.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: CinemaBig-1.1 - C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\Extensions\EKJVVD29402736@EUOWKG84927606.com [2014-08-16]
FF Extension: Fast Start - C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\Extensions\faststartff@gmail.com [2014-08-16]
FF Extension: jid0W5zY771zDsu5o7dTJ8KHm38w1xsjetpack - C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\Extensions\jid0-W5zY771zDsu5o7dTJ8KHm38w1xs@jetpack [2014-08-21]
FF Extension: Adblock Plus - C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-16]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-07-30]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\xieabhbj.default\extensions\faststartff@gmail.com
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKCU\...\Firefox\Extensions: [{F24C6026-C57F-3D04-CB35-0E024359A5D9}] - C:\Program Files (x86)\ver2click-n-mark\177.xpi

Chrome: 
=======
CHR HomePage: Default -> hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK02_ksL2_MLy1sX1iWGcO6-WQRbnlIMOq9pu7FICErOn6_BAjvYH9KwncNVacd_95llvyrKO26MMBCGRneuavMolmXBqH4t-0H9qkDY-4JL3uVcDtEA7qehuHsbGrsiXN3QrVGvfLMeoYByi7TF0F6x2csbZUMhnqihD_jPrJAnuvOe56TC37UL4Hn_JzoiZjW8enon7bSLfPXY,
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-04]
CHR Extension: (Google Drive) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-04]
CHR Extension: (YouTube) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-04]
CHR Extension: (Google-Suche) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-04]
CHR Extension: (Hola Besseres Internet) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-08-12]
CHR Extension: (click-n-mark) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpfkjlomjepcimahhajjchpgpjkcfmg [2014-08-16]
CHR Extension: (CinemaBig-1.1) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kehodepjgiiheddbihdkcgcbkeibmnij [2014-08-21]
CHR Extension: (Google Wallet) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-04]
CHR Extension: (Quick start) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-16]
CHR Extension: (Google Mail) - C:\Users\Manuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-05-23] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [652640 2013-05-31] (cFos Software GmbH)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-16] (globalUpdate) [File not signed]
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [919040 2014-05-17] (AnchorFree Inc.) [File not signed]
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2014-05-17] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [430344 2014-05-17] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 NetworkHostSrv; C:\ProgramData\Online\sv.exe [408576 2014-08-16] (NetWork Host Corporation) [File not signed]
R2 RadioRage_4jService; C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbarsvc.exe [88648 2014-06-21] (COMPANYVERS_NAME)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 FileGUIProcess.exe; C:\Users\Manuel\AppData\Local\FileGUIProcess\FileGUIProcess.exe [X]
S2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe -service [X]
S2 Update Okiitan; "C:\Program Files (x86)\Okiitan\updateOkiitan.exe" [X]
S2 UpdaterSvcFralimbo; "C:\Program Files (x86)\Fralimbo\updater.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-26] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2014-05-16] (FNet Co., Ltd.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-05-17] (AnchorFree Inc.)
R3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
R2 webinstr; C:\Windows\system32\Drivers\webinstr.sys [57528 2014-07-16] (Corsica)
R1 {19831108-de35-4c98-b883-7bb790bfc59c}Gw64; C:\Windows\System32\drivers\{19831108-de35-4c98-b883-7bb790bfc59c}Gw64.sys [61112 2014-07-26] (StdLib)
R1 {19831108-de35-4c98-b883-7bb790bfc59c}w64; C:\Windows\System32\drivers\{19831108-de35-4c98-b883-7bb790bfc59c}w64.sys [61112 2014-07-03] (StdLib)
R1 {4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}Gw64; C:\Windows\System32\drivers\{4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}Gw64.sys [61112 2014-07-08] (StdLib)
R1 {4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}w64; C:\Windows\System32\drivers\{4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}w64.sys [61112 2014-07-03] (StdLib)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-02 20:20 - 2014-09-02 20:21 - 00020745 _____ () C:\Users\Manuel\Downloads\FRST.txt
2014-09-02 20:19 - 2014-09-02 20:20 - 00000000 ____D () C:\FRST
2014-09-02 20:19 - 2014-09-02 20:19 - 02104832 _____ (Farbar) C:\Users\Manuel\Downloads\FRST64.exe
2014-09-02 19:44 - 2014-09-02 19:44 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-09-02 17:29 - 2014-09-02 17:29 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-09-02 17:27 - 2014-09-02 19:44 - 00000360 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-09-02 17:27 - 2014-09-02 19:43 - 00002720 _____ () C:\Windows\System32\Tasks\DriverToolkit Autorun
2014-09-02 17:24 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-09-02 17:24 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-02 17:24 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-02 17:24 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-09-02 17:24 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-09-02 17:24 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-09-02 17:24 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-09-02 17:24 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-09-02 17:24 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-09-02 17:24 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-09-02 17:24 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-09-02 17:24 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-09-02 17:24 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-09-02 17:24 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-09-02 17:24 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-09-02 17:24 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-09-02 17:24 - 2013-10-01 22:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-09-02 17:24 - 2013-10-01 22:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-09-02 17:24 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-09-02 17:24 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-09-02 17:24 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-09-02 17:24 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-09-02 17:24 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-09-02 17:24 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-09-02 17:24 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-09-02 17:21 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-02 17:21 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-02 17:21 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-02 17:21 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-02 17:20 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-02 17:20 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-02 17:20 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-09-02 17:20 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-09-02 17:20 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-09-02 17:20 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\Users\Manuel\AppData\Local\DriverToolkit
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2014-09-02 17:12 - 2014-09-02 17:12 - 02396224 _____ (Megaify Software ) C:\Users\Manuel\Downloads\driver_setup.exe
2014-09-02 16:45 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-09-02 16:45 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-09-02 16:31 - 2014-09-02 16:31 - 00159144 _____ (Microsoft Corporation) C:\Users\Manuel\Downloads\WindowsActivationUpdate.exe
2014-09-02 16:24 - 2014-09-02 16:24 - 00000000 ____D () C:\Windows\Sun
2014-09-02 03:38 - 2014-09-02 03:40 - 00030606 _____ () C:\Windows\wininit.ini
2014-09-02 03:11 - 2014-09-02 03:38 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-02 03:11 - 2014-09-02 03:12 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-02 03:11 - 2014-09-02 03:11 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-02 03:11 - 2014-09-02 03:11 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-02 03:11 - 2014-09-02 03:11 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-02 03:11 - 2014-09-02 03:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-02 03:11 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-02 03:08 - 2014-09-02 03:08 - 01101648 _____ () C:\Users\Manuel\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-02 03:03 - 2014-09-02 03:03 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-02 03:03 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-02 03:03 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-02 03:03 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-02 02:57 - 2014-09-02 02:57 - 00003150 _____ () C:\Windows\System32\Tasks\{F81ED76F-6CBA-4CDD-BD2F-7317CCD382E0}
2014-08-30 18:57 - 2014-08-30 18:57 - 01458408 _____ () C:\Users\Manuel\Downloads\Setup (2).exe
2014-08-30 18:40 - 2014-08-30 18:40 - 01458416 _____ () C:\Users\Manuel\Downloads\Player Setup.exe
2014-08-30 18:26 - 2014-07-03 16:17 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}w64.sys
2014-08-30 18:26 - 2014-07-03 16:13 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{19831108-de35-4c98-b883-7bb790bfc59c}w64.sys
2014-08-27 19:23 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 19:23 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 19:23 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 14:14 - 2014-08-27 14:15 - 00262144 _____ () C:\Windows\Minidump\082714-22230-01.dmp
2014-08-21 23:55 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-21 23:55 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-21 23:55 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-21 23:55 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-21 23:55 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-21 23:55 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-21 23:55 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-21 23:55 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-21 23:55 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-21 23:55 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-21 23:55 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-21 23:55 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-21 23:55 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-21 23:55 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-21 15:35 - 2014-08-21 15:35 - 00262144 _____ () C:\Windows\Minidump\082114-14742-01.dmp
2014-08-17 03:02 - 2014-09-02 02:59 - 00002298 _____ () C:\Users\Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-08-17 03:02 - 2014-08-17 03:02 - 00000000 ____D () C:\Users\Manuel\AppData\Local\LPT
2014-08-16 14:47 - 2014-07-26 16:39 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{19831108-de35-4c98-b883-7bb790bfc59c}Gw64.sys
2014-08-16 14:47 - 2014-07-08 18:39 - 00061112 _____ (StdLib) C:\Windows\system32\Drivers\{4b422a53-5e7a-4d97-99eb-c01c5d49b9d6}Gw64.sys
2014-08-16 13:50 - 2014-08-30 18:33 - 00000000 ____D () C:\ProgramData\NetworkHostTask
2014-08-16 13:44 - 2014-09-02 19:44 - 00001704 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5_user.job
2014-08-16 13:44 - 2014-09-02 19:44 - 00001684 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5.job
2014-08-16 13:44 - 2014-09-02 19:44 - 00001404 _____ () C:\Windows\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541.job
2014-08-16 13:44 - 2014-08-16 13:44 - 00004714 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5
2014-08-16 13:44 - 2014-08-16 13:44 - 00004434 _____ () C:\Windows\System32\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541
2014-08-16 13:43 - 2014-09-02 19:44 - 00004144 _____ () C:\Windows\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00002772 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00002244 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00002192 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00001812 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00001424 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2.job
2014-08-16 13:43 - 2014-09-02 19:44 - 00000618 _____ () C:\Windows\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d.job
2014-08-16 13:43 - 2014-09-02 02:59 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\istart123
2014-08-16 13:43 - 2014-08-21 23:48 - 00000000 ____D () C:\Users\Manuel\AppData\Local\CGIMetafileODBC
2014-08-16 13:43 - 2014-08-16 13:44 - 00004454 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2
2014-08-16 13:43 - 2014-08-16 13:43 - 00300920 _____ () C:\Users\Manuel\Downloads\setup (1).exe
2014-08-16 13:43 - 2014-08-16 13:43 - 00007174 _____ () C:\Windows\System32\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14
2014-08-16 13:43 - 2014-08-16 13:43 - 00005802 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4
2014-08-16 13:43 - 2014-08-16 13:43 - 00005274 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7
2014-08-16 13:43 - 2014-08-16 13:43 - 00005220 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6
2014-08-16 13:43 - 2014-08-16 13:43 - 00004842 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1
2014-08-16 13:43 - 2014-08-16 13:43 - 00003648 _____ () C:\Windows\System32\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d
2014-08-16 13:43 - 2014-08-16 13:43 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-08-16 13:42 - 2014-09-02 19:47 - 00000000 ____D () C:\Users\Manuel\AppData\Local\fst_de_137
2014-08-16 13:42 - 2014-09-02 19:44 - 00004482 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11.job
2014-08-16 13:42 - 2014-09-02 19:44 - 00003120 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3.job
2014-08-16 13:42 - 2014-09-02 19:44 - 00000924 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-16 13:42 - 2014-09-02 19:44 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-08-16 13:42 - 2014-09-02 19:44 - 00000426 _____ () C:\Windows\Tasks\click-n-mark Update.job
2014-08-16 13:42 - 2014-09-02 19:44 - 00000406 _____ () C:\Windows\Tasks\click-n-mark_wd.job
2014-08-16 13:42 - 2014-09-02 03:49 - 00000000 ____D () C:\Program Files (x86)\CinemaBig-1.1
2014-08-16 13:42 - 2014-08-27 23:05 - 00000000 ____D () C:\Windows\SysWOW64\FrozenRemoteWiget
2014-08-16 13:42 - 2014-08-16 13:43 - 00007512 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11
2014-08-16 13:42 - 2014-08-16 13:42 - 00006150 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3
2014-08-16 13:42 - 2014-08-16 13:42 - 00003672 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-16 13:42 - 2014-08-16 13:42 - 00003076 _____ () C:\Windows\System32\Tasks\click-n-mark Update
2014-08-16 13:42 - 2014-08-16 13:42 - 00002996 _____ () C:\Windows\System32\Tasks\click-n-mark_wd
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Users\Manuel\AppData\Local\globalUpdate
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Program Files (x86)\eDealsPop
2014-08-16 13:42 - 2014-07-16 18:42 - 00057528 _____ (Corsica) C:\Windows\system32\Drivers\webinstr.sys
2014-08-16 13:41 - 2014-09-02 03:49 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\serv
2014-08-16 13:41 - 2014-08-16 13:41 - 00300920 _____ () C:\Users\Manuel\Downloads\setup.exe
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\device
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\ProgramData\UpdateCommon
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\ProgramData\Online
2014-08-16 11:56 - 2014-08-16 11:56 - 00262144 _____ () C:\Windows\Minidump\081614-21808-01.dmp
2014-08-14 23:55 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 23:55 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 23:55 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 23:55 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 23:55 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 23:55 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 23:55 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 23:55 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 23:00 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-14 23:00 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-14 23:00 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-14 23:00 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 23:00 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-14 23:00 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-14 23:00 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-14 23:00 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-14 23:00 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-14 23:00 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-14 23:00 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-14 23:00 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-14 23:00 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-14 23:00 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 23:00 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-14 23:00 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-14 23:00 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-14 23:00 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-14 23:00 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-14 23:00 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-14 23:00 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-14 23:00 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-14 23:00 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-14 23:00 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-14 23:00 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-14 23:00 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-14 23:00 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-14 23:00 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-14 23:00 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-14 23:00 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-14 23:00 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-14 22:59 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-14 22:59 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-14 22:59 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-14 22:59 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-14 22:59 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-14 22:59 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-14 22:59 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-14 22:59 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-14 22:59 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 22:59 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-14 22:59 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-14 22:59 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-14 22:59 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-14 22:59 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-14 22:59 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-14 22:59 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-14 22:59 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-14 22:59 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-14 22:59 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-14 22:59 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-14 22:59 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-14 22:59 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-14 22:59 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-14 22:59 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-14 22:59 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-14 22:18 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 22:18 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 22:18 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 22:18 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 22:18 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 22:18 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 22:18 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 22:18 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 22:18 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 22:17 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 22:12 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 22:12 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 20:19 - 2014-08-14 20:20 - 00262144 _____ () C:\Windows\Minidump\081414-19219-01.dmp
2014-08-12 23:35 - 2014-08-12 23:35 - 00048700 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41_HotFix (1).zip
2014-08-12 22:46 - 2014-08-12 22:46 - 00048700 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41_HotFix.zip
2014-08-12 22:43 - 2014-08-12 23:05 - 1387330408 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41m.rar
2014-08-12 16:14 - 2014-08-14 16:30 - 00000000 ____D () C:\Program Files\Hola
2014-08-12 16:14 - 2014-08-12 16:14 - 00089240 _____ (Hola Networks Ltd.) C:\Windows\system32\Drivers\hola_mon_drv.sys
2014-08-12 16:13 - 2014-08-12 16:14 - 13060488 _____ () C:\Users\Manuel\Downloads\Hola-Setup-1.4.364.zip
2014-08-12 16:13 - 2014-08-12 16:13 - 13060488 _____ () C:\Users\Manuel\Downloads\Hola-Setup-1.4.364 (1).zip
2014-08-12 15:34 - 2014-08-12 15:34 - 00262144 _____ () C:\Windows\Minidump\081214-17128-01.dmp
2014-08-10 11:10 - 2014-08-10 11:10 - 00262144 _____ () C:\Windows\Minidump\081014-41106-01.dmp
2014-08-09 12:37 - 2014-08-09 12:39 - 00000000 ____D () C:\Users\Manuel\Desktop\Bewerbung
2014-08-09 12:17 - 2014-08-09 12:17 - 00002713 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
2014-08-09 12:17 - 2014-08-09 12:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-09 12:16 - 2014-08-09 12:16 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-08-09 12:15 - 2014-08-09 12:15 - 01101648 _____ () C:\Users\Manuel\Downloads\Word Viewer - CHIP-Installer.exe
2014-08-04 22:28 - 2014-09-02 19:44 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 22:28 - 2014-09-02 19:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 22:28 - 2014-09-02 02:59 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-04 22:28 - 2014-08-04 22:36 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-04 22:28 - 2014-08-04 22:36 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\Users\Manuel\AppData\Local\Google
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\Program Files (x86)\Google

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-02 20:21 - 2014-09-02 20:20 - 00020745 _____ () C:\Users\Manuel\Downloads\FRST.txt
2014-09-02 20:20 - 2014-09-02 20:19 - 00000000 ____D () C:\FRST
2014-09-02 20:19 - 2014-09-02 20:19 - 02104832 _____ (Farbar) C:\Users\Manuel\Downloads\FRST64.exe
2014-09-02 19:51 - 2009-07-14 06:45 - 00026704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-02 19:51 - 2009-07-14 06:45 - 00026704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-02 19:47 - 2014-08-16 13:42 - 00000000 ____D () C:\Users\Manuel\AppData\Local\fst_de_137
2014-09-02 19:47 - 2014-05-16 15:30 - 01877060 _____ () C:\Windows\WindowsUpdate.log
2014-09-02 19:44 - 2014-09-02 19:44 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-09-02 19:44 - 2014-09-02 17:27 - 00000360 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-09-02 19:44 - 2014-08-16 13:44 - 00001704 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5_user.job
2014-09-02 19:44 - 2014-08-16 13:44 - 00001684 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5.job
2014-09-02 19:44 - 2014-08-16 13:44 - 00001404 _____ () C:\Windows\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00004144 _____ () C:\Windows\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00002772 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00002244 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00002192 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00001812 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00001424 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2.job
2014-09-02 19:44 - 2014-08-16 13:43 - 00000618 _____ () C:\Windows\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d.job
2014-09-02 19:44 - 2014-08-16 13:42 - 00004482 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11.job
2014-09-02 19:44 - 2014-08-16 13:42 - 00003120 _____ () C:\Windows\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3.job
2014-09-02 19:44 - 2014-08-16 13:42 - 00000924 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-02 19:44 - 2014-08-16 13:42 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-09-02 19:44 - 2014-08-16 13:42 - 00000426 _____ () C:\Windows\Tasks\click-n-mark Update.job
2014-09-02 19:44 - 2014-08-16 13:42 - 00000406 _____ () C:\Windows\Tasks\click-n-mark_wd.job
2014-09-02 19:44 - 2014-08-04 22:28 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-02 19:44 - 2014-07-30 05:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-02 19:44 - 2014-06-23 14:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-02 19:44 - 2010-11-21 05:47 - 00183792 _____ () C:\Windows\PFRO.log
2014-09-02 19:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-02 19:44 - 2009-07-14 06:51 - 00028076 _____ () C:\Windows\setupact.log
2014-09-02 19:43 - 2014-09-02 17:27 - 00002720 _____ () C:\Windows\System32\Tasks\DriverToolkit Autorun
2014-09-02 19:41 - 2014-08-04 22:28 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-02 19:37 - 2014-05-16 19:40 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-02 17:29 - 2014-09-02 17:29 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-09-02 17:29 - 2014-05-16 15:30 - 00000000 ____D () C:\Users\Manuel
2014-09-02 17:28 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-02 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-09-02 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-09-02 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-09-02 17:24 - 2014-05-17 06:26 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-09-02 17:24 - 2014-05-17 06:26 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-09-02 17:24 - 2014-05-16 17:58 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-02 17:23 - 2009-07-14 07:13 - 01591896 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-02 17:22 - 2014-05-16 19:09 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-02 17:22 - 2014-05-16 18:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\Users\Manuel\AppData\Local\DriverToolkit
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
2014-09-02 17:14 - 2014-09-02 17:14 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2014-09-02 17:12 - 2014-09-02 17:12 - 02396224 _____ (Megaify Software ) C:\Users\Manuel\Downloads\driver_setup.exe
2014-09-02 16:31 - 2014-09-02 16:31 - 00159144 _____ (Microsoft Corporation) C:\Users\Manuel\Downloads\WindowsActivationUpdate.exe
2014-09-02 16:24 - 2014-09-02 16:24 - 00000000 ____D () C:\Windows\Sun
2014-09-02 14:44 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini
2014-09-02 03:49 - 2014-08-16 13:42 - 00000000 ____D () C:\Program Files (x86)\CinemaBig-1.1
2014-09-02 03:49 - 2014-08-16 13:41 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\serv
2014-09-02 03:40 - 2014-09-02 03:38 - 00030606 _____ () C:\Windows\wininit.ini
2014-09-02 03:38 - 2014-09-02 03:11 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-02 03:12 - 2014-09-02 03:11 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-02 03:11 - 2014-09-02 03:11 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-02 03:11 - 2014-09-02 03:11 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-02 03:11 - 2014-09-02 03:11 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-02 03:11 - 2014-09-02 03:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-02 03:08 - 2014-09-02 03:08 - 01101648 _____ () C:\Users\Manuel\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-02 03:03 - 2014-09-02 03:03 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-02 03:03 - 2014-05-26 19:58 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-02 03:03 - 2014-05-26 19:57 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-02 02:59 - 2014-08-17 03:02 - 00002298 _____ () C:\Users\Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-09-02 02:59 - 2014-08-16 13:43 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\istart123
2014-09-02 02:59 - 2014-08-04 22:28 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-02 02:59 - 2014-06-23 14:30 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-02 02:59 - 2014-06-23 14:30 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-02 02:59 - 2014-05-16 15:30 - 00001395 _____ () C:\Users\Manuel\Desktop\Internet Explorer.lnk
2014-09-02 02:57 - 2014-09-02 02:57 - 00003150 _____ () C:\Windows\System32\Tasks\{F81ED76F-6CBA-4CDD-BD2F-7317CCD382E0}
2014-08-30 18:57 - 2014-08-30 18:57 - 01458408 _____ () C:\Users\Manuel\Downloads\Setup (2).exe
2014-08-30 18:40 - 2014-08-30 18:40 - 01458416 _____ () C:\Users\Manuel\Downloads\Player Setup.exe
2014-08-30 18:33 - 2014-08-16 13:50 - 00000000 ____D () C:\ProgramData\NetworkHostTask
2014-08-30 18:24 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 02:20 - 2014-05-19 18:54 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\TS3Client
2014-08-27 23:05 - 2014-08-16 13:42 - 00000000 ____D () C:\Windows\SysWOW64\FrozenRemoteWiget
2014-08-27 22:36 - 2014-05-16 20:25 - 00000000 ____D () C:\Users\Manuel\AppData\Local\Arma 3
2014-08-27 19:39 - 2014-05-16 19:04 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-27 14:43 - 2014-05-16 20:24 - 00027598 _____ () C:\Windows\DirectX.log
2014-08-27 14:15 - 2014-08-27 14:14 - 00262144 _____ () C:\Windows\Minidump\082714-22230-01.dmp
2014-08-27 14:14 - 2014-06-22 00:51 - 708832287 _____ () C:\Windows\MEMORY.DMP
2014-08-27 14:14 - 2014-06-22 00:51 - 00000000 ____D () C:\Windows\Minidump
2014-08-23 04:07 - 2014-08-27 19:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-27 19:23 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-27 19:23 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 00:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Users\Manuel\Documents\The Forest
2014-08-22 00:30 - 2014-07-01 17:46 - 00000000 ____D () C:\Users\Manuel\Desktop\The Forest
2014-08-21 23:48 - 2014-08-16 13:43 - 00000000 ____D () C:\Users\Manuel\AppData\Local\CGIMetafileODBC
2014-08-21 15:35 - 2014-08-21 15:35 - 00262144 _____ () C:\Windows\Minidump\082114-14742-01.dmp
2014-08-18 18:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-18 13:13 - 2014-05-16 19:04 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-18 13:13 - 2014-05-16 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-18 13:13 - 2014-05-16 19:04 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-17 03:02 - 2014-08-17 03:02 - 00000000 ____D () C:\Users\Manuel\AppData\Local\LPT
2014-08-16 13:44 - 2014-08-16 13:44 - 00004714 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-5
2014-08-16 13:44 - 2014-08-16 13:44 - 00004434 _____ () C:\Windows\System32\Tasks\b568c771-f890-4a93-8b7d-7b13e41e9541
2014-08-16 13:44 - 2014-08-16 13:43 - 00004454 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-2
2014-08-16 13:43 - 2014-08-16 13:43 - 00300920 _____ () C:\Users\Manuel\Downloads\setup (1).exe
2014-08-16 13:43 - 2014-08-16 13:43 - 00007174 _____ () C:\Windows\System32\Tasks\035e6d95-8f2d-4b1d-a270-ad7b528b1e14
2014-08-16 13:43 - 2014-08-16 13:43 - 00005802 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-4
2014-08-16 13:43 - 2014-08-16 13:43 - 00005274 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-7
2014-08-16 13:43 - 2014-08-16 13:43 - 00005220 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-6
2014-08-16 13:43 - 2014-08-16 13:43 - 00004842 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-1
2014-08-16 13:43 - 2014-08-16 13:43 - 00003648 _____ () C:\Windows\System32\Tasks\691b443b-3804-4d92-be7b-0f43ca34789d
2014-08-16 13:43 - 2014-08-16 13:43 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-08-16 13:43 - 2014-08-16 13:42 - 00007512 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-11
2014-08-16 13:42 - 2014-08-16 13:42 - 00006150 _____ () C:\Windows\System32\Tasks\54df1f61-9037-4087-b55f-d9b40945efe5-3
2014-08-16 13:42 - 2014-08-16 13:42 - 00003672 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-16 13:42 - 2014-08-16 13:42 - 00003076 _____ () C:\Windows\System32\Tasks\click-n-mark Update
2014-08-16 13:42 - 2014-08-16 13:42 - 00002996 _____ () C:\Windows\System32\Tasks\click-n-mark_wd
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Users\Manuel\AppData\Local\globalUpdate
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-16 13:42 - 2014-08-16 13:42 - 00000000 ____D () C:\Program Files (x86)\eDealsPop
2014-08-16 13:42 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-08-16 13:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-08-16 13:41 - 2014-08-16 13:41 - 00300920 _____ () C:\Users\Manuel\Downloads\setup.exe
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\Users\Manuel\AppData\Roaming\device
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\ProgramData\UpdateCommon
2014-08-16 13:41 - 2014-08-16 13:41 - 00000000 ____D () C:\ProgramData\Online
2014-08-16 11:56 - 2014-08-16 11:56 - 00262144 _____ () C:\Windows\Minidump\081614-21808-01.dmp
2014-08-15 23:43 - 2014-05-16 19:40 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-15 23:43 - 2014-05-16 19:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-15 23:43 - 2014-05-16 19:40 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-14 23:59 - 2014-05-16 17:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 23:58 - 2014-05-16 17:29 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 20:20 - 2014-08-14 20:19 - 00262144 _____ () C:\Windows\Minidump\081414-19219-01.dmp
2014-08-14 16:30 - 2014-08-12 16:14 - 00000000 ____D () C:\Program Files\Hola
2014-08-12 23:53 - 2014-05-26 19:52 - 00000000 ____D () C:\Program Files (x86)\ArmA3Sync
2014-08-12 23:35 - 2014-08-12 23:35 - 00048700 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41_HotFix (1).zip
2014-08-12 23:05 - 2014-08-12 22:43 - 1387330408 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41m.rar
2014-08-12 22:46 - 2014-08-12 22:46 - 00048700 _____ () C:\Users\Manuel\Downloads\140811_Distrikt41_HotFix.zip
2014-08-12 16:14 - 2014-08-12 16:14 - 00089240 _____ (Hola Networks Ltd.) C:\Windows\system32\Drivers\hola_mon_drv.sys
2014-08-12 16:14 - 2014-08-12 16:13 - 13060488 _____ () C:\Users\Manuel\Downloads\Hola-Setup-1.4.364.zip
2014-08-12 16:13 - 2014-08-12 16:13 - 13060488 _____ () C:\Users\Manuel\Downloads\Hola-Setup-1.4.364 (1).zip
2014-08-12 15:34 - 2014-08-12 15:34 - 00262144 _____ () C:\Windows\Minidump\081214-17128-01.dmp
2014-08-10 11:10 - 2014-08-10 11:10 - 00262144 _____ () C:\Windows\Minidump\081014-41106-01.dmp
2014-08-09 12:39 - 2014-08-09 12:37 - 00000000 ____D () C:\Users\Manuel\Desktop\Bewerbung
2014-08-09 12:17 - 2014-08-09 12:17 - 00002713 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
2014-08-09 12:17 - 2014-08-09 12:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-09 12:16 - 2014-08-09 12:16 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-08-09 12:15 - 2014-08-09 12:15 - 01101648 _____ () C:\Users\Manuel\Downloads\Word Viewer - CHIP-Installer.exe
2014-08-09 11:14 - 2014-05-16 15:30 - 00000000 ____D () C:\Users\Manuel\AppData\Local\VirtualStore
2014-08-07 04:06 - 2014-09-02 17:20 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-09-02 17:20 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-04 22:36 - 2014-08-04 22:28 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-04 22:36 - 2014-08-04 22:28 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\Users\Manuel\AppData\Local\Google
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-04 22:28 - 2014-08-04 22:28 - 00000000 ____D () C:\Program Files (x86)\Google

Some content of TEMP:
====================
C:\Users\Manuel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 18:30

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Kann mir hier niemand helfen?
Oder ist Schrauber der einzige der das kann?

Ich mach mir langsam sorgen um meinen PC und ich bräuchte ihn gerade sehr da ich etwas wichtiges daran machen muss.
Wär super Nett wenn sich hier jemand meldet

schrauber · 04.09.2014, 13:23

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Problem bei Internetbrowser/ Werbung und falsche Anzeige

Plagegeister aller Art und deren Bekämpfung: Problem bei Internetbrowser/ Werbung und falsche Anzeige