win7 -malwerebytesscan erkennt probleme: "yahoo safe finder"

hmup · 13.09.2014, 19:20

hallo,

folgendes hat Malwarebytes auf meinem pc entdeckt:
(ich habe die dateien/ordner bereits in quarantäne verschoben und gelöscht)

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 13.09.2014
Suchlauf-Zeit: 19:20:18
Logdatei: malwarescasn.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.13.03
Rootkit Datenbank: v2014.09.12.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer:

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 390547
Verstrichene Zeit: 6 Min, 13 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 3
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],

Dateien: 10
PUP.Optional.SafeFinder.A, C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\searchplugins\SafeFinder Search.xml, In Quarantäne, [51d6eeffe9921620c32ca25f36cd867a],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\PublisherSettings.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\NewConfig.txt, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\UserSettings.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\XMLOperations.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\LPTMapping.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\Timers.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\LPT.xml, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\ntdis_64.dll, In Quarantäne, [b770bf2ea4d7e452bf10210908fb53ad],

Physische Sektoren: 0
(No malicious items detected)

(end)

wie muss ich weiter vorgehen?

besten dank im vorraus.

cosinus · 13.09.2014, 19:27

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

hmup · 13.09.2014, 21:01

hallo,

habe keine weiteren scans(windows security essentials zeigt nichts an/hat nie etwas angezeigt).

ich habe defogger nach anleitung installiert und ausgeführt(das programm zeigt auch nichts an)

hier der frst scan:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by linkslang (administrator) on LINKSLANG-PC on 13-09-2014 21:52:12
Running from C:\Users\tsubasa\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-04-03] (FNet Co., Ltd.)
HKLM-x32\...\Run: [THX TruStudio NB Settings] => C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-07-30] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-05-12] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-04-03] (Microsoft Corporation)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [F.lux] => C:\Users\linkslang\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [F.lux] => C:\Users\tsubasa\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [Raptr] => C:\PROGRA~2\Raptr\raptrstub.exe --startup
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [F.lux] => C:\Users\linkslang\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [Raptr] => C:\PROGRA~2\Raptr\raptrstub.exe --startup
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF3856C259C30CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{595ABC2E-A9B5-46E6-9186-12C8F3DB643C}: [NameServer] 62.220.18.8 89.246.64.8

FireFox:
========
FF ProfilePath: C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-12-29]
FF Extension: NoScript - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-09-13]
FF Extension: Adblock Plus - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-03]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR DefaultSearchURL: Default -> {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-03]
CHR Extension: (Google-Suche) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-03]
CHR Extension: (Google Mail) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-04-09] (PostgreSQL Global Development Group) [File not signed]
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-04-23] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-04-03] (FNet Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-09-13] ()
S3 MBfilt; system32\drivers\MBfilt64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-13 21:52 - 2014-09-13 21:52 - 00018275 _____ () C:\Users\tsubasa\Downloads\FRST.txt
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-09-13 21:49 - 2014-09-13 21:49 - 01110476 _____ () C:\Users\tsubasa\Downloads\7z920.exe
2014-09-13 21:33 - 2014-09-13 21:40 - 00008909 _____ () C:\Users\linkslang\Downloads\FRST1.rar
2014-09-13 21:33 - 2014-09-13 21:40 - 00007936 _____ () C:\Users\linkslang\Downloads\frst.rar
2014-09-13 21:25 - 2014-09-13 21:25 - 00054035 _____ () C:\Users\linkslang\Downloads\FRST1.txt
2014-09-13 21:24 - 2014-09-13 21:24 - 00107497 _____ () C:\Users\linkslang\Downloads\frst.txt
2014-09-13 20:33 - 2014-09-13 21:52 - 00000000 ____D () C:\FRST
2014-09-13 20:31 - 2014-09-13 20:32 - 00000480 _____ () C:\Users\tsubasa\Downloads\defogger_disable.log
2014-09-13 20:31 - 2014-09-13 20:31 - 00000000 _____ () C:\Users\linkslang\defogger_reenable
2014-09-13 20:29 - 2014-09-13 20:29 - 02105856 _____ (Farbar) C:\Users\tsubasa\Downloads\FRST64.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00380416 _____ () C:\Users\tsubasa\Downloads\Gmer-19357.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00050477 _____ () C:\Users\tsubasa\Downloads\Defogger.exe
2014-09-13 19:29 - 2014-09-13 19:29 - 00002763 _____ () C:\malwarescasn.txt
2014-09-13 19:08 - 2014-09-13 20:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-13 19:08 - 2014-09-13 19:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-13 19:08 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-13 19:08 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-13 19:04 - 2014-09-13 19:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tsubasa\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-13 17:05 - 2014-09-13 17:07 - 17703856 _____ (Adobe Systems Inc.) C:\Users\tsubasa\Downloads\AdobeAIRInstaller.exe
2014-09-13 16:42 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-13 16:42 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-13 16:42 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 16:42 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 16:42 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-13 16:42 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-13 16:42 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 16:42 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 16:42 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 16:42 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-13 16:42 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-13 16:42 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-13 16:42 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 16:42 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-13 16:42 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 16:42 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-13 16:42 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-13 16:42 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-13 16:42 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 16:42 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-13 16:42 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-13 16:42 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-13 16:42 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-13 16:42 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-13 16:42 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-13 16:42 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-13 16:42 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 16:42 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-13 16:42 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-13 16:42 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-13 16:42 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-13 16:42 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 16:42 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-13 16:42 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 16:42 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-13 16:42 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-13 16:42 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-13 16:42 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-13 16:42 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-13 16:42 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 16:42 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-13 16:42 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 16:42 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-13 16:42 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-13 16:42 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-13 16:42 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 16:42 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-13 16:42 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-13 16:42 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-13 16:42 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-13 16:39 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 16:39 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-13 16:37 - 2014-09-13 16:37 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-13 16:24 - 2014-09-13 16:24 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-09-13 16:22 - 2014-09-13 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-13 16:17 - 2014-09-13 16:18 - 05329480 _____ (Secunia) C:\Users\tsubasa\Downloads\PSISetup_3.0.0.9016.exe
2014-09-13 16:15 - 2014-09-13 16:20 - 36013664 _____ (Skype Technologies S.A.) C:\Users\tsubasa\Downloads\SkypeSetupFull_6.20.73.104.exe
2014-09-13 16:08 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-13 16:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-13 16:08 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-13 16:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-13 16:07 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-13 16:07 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-13 16:07 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-13 16:07 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-13 16:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-13 16:07 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-13 16:07 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieUserList
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieSiteList
2014-09-10 20:41 - 2014-09-13 19:51 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-09-10 14:23 - 2014-09-10 14:23 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\0F1L1I1P0H1L1E1E1F
2014-09-09 22:48 - 2014-09-13 16:49 - 09392128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-08-28 19:49 - 2014-08-28 19:49 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-08-28 19:49 - 2014-08-28 19:49 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-08-28 19:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 19:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 19:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 14:10 - 2014-08-20 14:10 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-20 14:05 - 2014-08-20 14:07 - 96138664 _____ (Oracle Corporation) C:\Users\tsubasa\Downloads\jre-8u20-windows-x64.exe
2014-08-19 21:49 - 2014-08-19 21:49 - 02174848 _____ () C:\Users\tsubasa\Downloads\instsf450.exe
2014-08-17 19:21 - 2014-08-17 19:22 - 00000000 _____ () C:\Users\tsubasa\AppData\Local\{A5DC64F6-07D4-4D6F-9CC9-11BBDDC5F156}
2014-08-17 19:21 - 2014-08-17 19:21 - 00000000 ____H () C:\Users\tsubasa\AppData\Local\BITBC2.tmp
2014-08-14 02:22 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 02:22 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 02:22 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 02:22 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 02:22 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 02:22 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 02:22 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 02:22 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 01:31 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 01:31 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 01:31 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-14 01:31 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-14 01:31 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-14 01:31 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-14 01:31 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-14 01:31 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-14 01:31 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-14 01:31 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-14 01:31 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-14 01:31 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-14 01:31 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-14 01:31 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-14 01:31 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 01:31 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 01:31 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-14 01:31 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-14 01:31 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-14 01:31 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-14 01:31 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-14 01:31 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-14 01:31 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-14 01:31 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-14 01:30 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 01:30 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-13 21:52 - 2014-09-13 21:52 - 00018275 _____ () C:\Users\tsubasa\Downloads\FRST.txt
2014-09-13 21:52 - 2014-09-13 20:33 - 00000000 ____D () C:\FRST
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-09-13 21:49 - 2014-09-13 21:49 - 01110476 _____ () C:\Users\tsubasa\Downloads\7z920.exe
2014-09-13 21:48 - 2013-04-03 22:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-13 21:45 - 2013-04-03 18:43 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-13 21:40 - 2014-09-13 21:33 - 00008909 _____ () C:\Users\linkslang\Downloads\FRST1.rar
2014-09-13 21:40 - 2014-09-13 21:33 - 00007936 _____ () C:\Users\linkslang\Downloads\frst.rar
2014-09-13 21:33 - 2013-04-04 00:13 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\WinRAR
2014-09-13 21:25 - 2014-09-13 21:25 - 00054035 _____ () C:\Users\linkslang\Downloads\FRST1.txt
2014-09-13 21:24 - 2014-09-13 21:24 - 00107497 _____ () C:\Users\linkslang\Downloads\frst.txt
2014-09-13 20:32 - 2014-09-13 20:31 - 00000480 _____ () C:\Users\tsubasa\Downloads\defogger_disable.log
2014-09-13 20:31 - 2014-09-13 20:31 - 00000000 _____ () C:\Users\linkslang\defogger_reenable
2014-09-13 20:31 - 2013-04-02 20:12 - 00000000 ____D () C:\Users\linkslang
2014-09-13 20:29 - 2014-09-13 20:29 - 02105856 _____ (Farbar) C:\Users\tsubasa\Downloads\FRST64.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00380416 _____ () C:\Users\tsubasa\Downloads\Gmer-19357.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00050477 _____ () C:\Users\tsubasa\Downloads\Defogger.exe
2014-09-13 20:07 - 2014-09-13 19:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-13 20:04 - 2013-04-02 01:13 - 01375211 _____ () C:\Windows\WindowsUpdate.log
2014-09-13 19:59 - 2013-04-03 18:49 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-09-13 19:59 - 2013-04-03 18:43 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-13 19:58 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-13 19:58 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-13 19:55 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-09-13 19:55 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-09-13 19:55 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-13 19:51 - 2014-09-10 20:41 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-09-13 19:51 - 2013-04-03 18:53 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys
2014-09-13 19:51 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-13 19:51 - 2009-07-14 06:51 - 00097783 _____ () C:\Windows\setupact.log
2014-09-13 19:50 - 2013-04-03 18:44 - 00916408 _____ () C:\Windows\PFRO.log
2014-09-13 19:50 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-09-13 19:29 - 2014-09-13 19:29 - 00002763 _____ () C:\malwarescasn.txt
2014-09-13 19:08 - 2014-09-13 19:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-13 19:07 - 2013-04-03 23:25 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\HoldemManager
2014-09-13 19:07 - 2013-04-03 14:20 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Skype
2014-09-13 19:06 - 2014-09-13 19:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tsubasa\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-13 19:00 - 2013-12-19 17:41 - 00300550 _____ () C:\rusherr.txt
2014-09-13 19:00 - 2013-05-20 23:31 - 00000000 ____D () C:\Users\linkslang\AppData\Local\FullTiltPoker.eu
2014-09-13 19:00 - 2013-05-20 23:21 - 00000000 ____D () C:\Program Files (x86)\Full Tilt Poker.Eu
2014-09-13 18:12 - 2014-06-11 15:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-13 17:14 - 2013-04-03 23:05 - 00000000 ____D () C:\Users\linkslang\AppData\Local\Adobe
2014-09-13 17:14 - 2013-04-03 22:04 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-13 17:14 - 2013-04-03 22:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-13 17:14 - 2013-04-03 22:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-13 17:07 - 2014-09-13 17:05 - 17703856 _____ (Adobe Systems Inc.) C:\Users\tsubasa\Downloads\AdobeAIRInstaller.exe
2014-09-13 16:49 - 2014-09-09 22:48 - 09392128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 16:45 - 2013-04-03 21:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-13 16:42 - 2013-04-03 18:50 - 01597378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-13 16:41 - 2013-07-22 22:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 16:41 - 2013-04-03 19:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-13 16:41 - 2013-04-03 19:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-13 16:41 - 2013-04-03 19:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-13 16:41 - 2013-04-03 19:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-13 16:39 - 2014-06-12 17:56 - 00006386 _____ () C:\Windows\SecuniaPackage.log
2014-09-13 16:39 - 2014-05-06 19:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-13 16:39 - 2013-04-03 20:24 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-13 16:37 - 2014-09-13 16:37 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-13 16:37 - 2013-04-03 21:58 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-13 16:24 - 2014-09-13 16:24 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-09-13 16:22 - 2014-09-13 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-13 16:22 - 2014-04-03 16:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-09-13 16:22 - 2014-04-03 16:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-13 16:22 - 2013-04-03 22:38 - 00000000 ____D () C:\ProgramData\Skype
2014-09-13 16:20 - 2014-09-13 16:15 - 36013664 _____ (Skype Technologies S.A.) C:\Users\tsubasa\Downloads\SkypeSetupFull_6.20.73.104.exe
2014-09-13 16:18 - 2014-09-13 16:17 - 05329480 _____ (Secunia) C:\Users\tsubasa\Downloads\PSISetup_3.0.0.9016.exe
2014-09-13 16:05 - 2013-04-03 22:45 - 00000000 ____D () C:\Users\tsubasa
2014-09-13 16:02 - 2014-04-14 01:03 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Battle.net
2014-09-13 16:02 - 2014-01-07 21:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PKR
2014-09-13 16:02 - 2013-12-11 04:27 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\vlc
2014-09-13 16:02 - 2013-06-27 04:17 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2014-09-13 16:02 - 2013-06-07 20:39 - 00000000 ____D () C:\Users\linkslang\AppData\Local\PokerStars.EU
2014-09-13 16:02 - 2013-04-18 00:32 - 00000000 ____D () C:\Program Files (x86)\FileHippo.com
2014-09-13 16:02 - 2013-04-10 03:21 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\dvdcss
2014-09-13 16:02 - 2013-04-10 02:39 - 00000000 ____D () C:\Users\tsubasa\AppData\Local\Equilab
2014-09-13 16:02 - 2013-04-03 23:14 - 00000000 ____D () C:\Users\postgres
2014-09-13 16:02 - 2013-04-03 22:04 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-13 16:02 - 2013-04-03 22:04 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\schemas
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-13 16:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-09-13 15:59 - 2014-07-24 18:26 - 00000000 ____D () C:\Program Files (x86)\Winner Poker
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieUserList
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieSiteList
2014-09-12 04:52 - 2014-04-14 01:03 - 00000000 ____D () C:\Users\tsubasa\AppData\Local\Battle.net
2014-09-10 14:23 - 2014-09-10 14:23 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\0F1L1I1P0H1L1E1E1F
2014-09-09 21:34 - 2013-07-28 19:54 - 00000000 ____D () C:\Users\linkslang\AppData\Local\CrashDumps
2014-09-09 17:12 - 2013-11-11 17:18 - 00001736 _____ () C:\speederr.txt
2014-09-05 04:10 - 2014-09-13 16:07 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-13 16:07 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-30 16:44 - 2013-06-07 20:39 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-08-28 23:16 - 2013-04-03 18:54 - 00064408 _____ () C:\Users\linkslang\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-28 22:44 - 2013-04-03 22:46 - 00064408 _____ () C:\Users\tsubasa\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-28 19:56 - 2009-07-14 06:45 - 00296440 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 19:49 - 2014-08-28 19:49 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-08-28 19:49 - 2014-08-28 19:49 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-08-28 19:49 - 2014-03-06 16:06 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-08-28 04:09 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-23 04:07 - 2014-08-28 19:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 19:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 19:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 02:23 - 2014-04-14 01:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-20 14:16 - 2014-06-16 14:24 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-20 14:16 - 2014-06-16 14:24 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-20 14:10 - 2014-08-20 14:10 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-20 14:10 - 2014-04-22 14:30 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-08-20 14:10 - 2014-04-22 14:30 - 00000000 ____D () C:\Program Files\Java
2014-08-20 14:07 - 2014-08-20 14:05 - 96138664 _____ (Oracle Corporation) C:\Users\tsubasa\Downloads\jre-8u20-windows-x64.exe
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\tsubasa\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\postgres\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\linkslang\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-08-19 21:52 - 2013-04-04 00:04 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-19 21:49 - 2014-08-19 21:49 - 02174848 _____ () C:\Users\tsubasa\Downloads\instsf450.exe
2014-08-19 20:05 - 2014-09-13 16:42 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-13 16:42 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 02:03 - 2014-04-14 01:28 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-08-19 01:01 - 2014-09-13 16:42 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-13 16:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-13 16:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-13 16:42 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-13 16:42 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-13 16:42 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-13 16:42 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-13 16:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-13 16:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-13 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-13 16:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-13 16:42 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-13 16:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-13 16:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 23:57 - 2014-09-13 16:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 23:56 - 2014-09-13 16:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 23:51 - 2014-09-13 16:42 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 23:46 - 2014-09-13 16:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 23:45 - 2014-09-13 16:42 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 23:45 - 2014-09-13 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 23:44 - 2014-09-13 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 23:44 - 2014-09-13 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 23:42 - 2014-09-13 16:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 23:40 - 2014-09-13 16:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 23:38 - 2014-09-13 16:42 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 23:37 - 2014-09-13 16:42 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 23:36 - 2014-09-13 16:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 23:35 - 2014-09-13 16:42 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 23:27 - 2014-09-13 16:42 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 23:25 - 2014-09-13 16:42 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 23:25 - 2014-09-13 16:42 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 23:23 - 2014-09-13 16:42 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 23:23 - 2014-09-13 16:42 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 23:22 - 2014-09-13 16:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 23:19 - 2014-09-13 16:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 23:17 - 2014-09-13 16:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 23:17 - 2014-09-13 16:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 23:16 - 2014-09-13 16:42 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 23:15 - 2014-09-13 16:42 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 23:15 - 2014-09-13 16:42 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 23:09 - 2014-09-13 16:42 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 23:08 - 2014-09-13 16:42 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 23:07 - 2014-09-13 16:42 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 22:55 - 2014-09-13 16:42 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 22:46 - 2014-09-13 16:42 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 22:38 - 2014-09-13 16:42 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 22:38 - 2014-09-13 16:42 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 22:36 - 2014-09-13 16:42 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-17 19:22 - 2014-08-17 19:21 - 00000000 _____ () C:\Users\tsubasa\AppData\Local\{A5DC64F6-07D4-4D6F-9CC9-11BBDDC5F156}
2014-08-17 19:21 - 2014-08-17 19:21 - 00000000 ____H () C:\Users\tsubasa\AppData\Local\BITBC2.tmp
2014-08-15 14:49 - 2013-04-03 23:15 - 00001088 _____ () C:\Users\Public\Desktop\HoldemManager2.lnk
2014-08-15 14:49 - 2013-04-03 23:15 - 00000000 ____D () C:\Program Files (x86)\Holdem Manager 2
2014-08-14 19:14 - 2013-06-07 21:09 - 00080486 _____ () C:\blitzerr.txt

Some content of TEMP:
====================
C:\Users\linkslang\AppData\Local\Temp\oa21qpgt.dll
C:\Users\linkslang\AppData\Local\Temp\ptuCBE9_tmp.exe
C:\Users\linkslang\AppData\Local\Temp\qmk00lt4.dll
C:\Users\linkslang\AppData\Local\Temp\raptrpatch.exe
C:\Users\linkslang\AppData\Local\Temp\raptr_stub.exe
C:\Users\linkslang\AppData\Local\Temp\sfamcc00001.dll
C:\Users\linkslang\AppData\Local\Temp\sfamcc00002.dll
C:\Users\linkslang\AppData\Local\Temp\sfextra.dll
C:\Users\linkslang\AppData\Local\Temp\xmlUpdater.exe
C:\Users\tsubasa\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-10 14:15

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

cosinus · 13.09.2014, 23:05

Addition.txt Logfile fehlt, bitte nachreichen

hmup · 14.09.2014, 01:06

ok ;-)

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by linkslang at 2014-09-14 02:18:06
Running from C:\Users\tsubasa\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 15.0.0.249 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31129 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1129.1143.20969 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{853A112F-241F-E344-4636-103C25D3751E}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81129.1203 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.1.000 - Asmedia Technology)
ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.188 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
ASRock InstantBoot v1.29 (HKLM-x32\...\ASRock InstantBoot_is1) (Version:  - )
ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version:  - ASRock Inc.)
ASRock XFast RAM v2.0.9 (HKLM\...\ASRock XFast RAM_is1) (Version:  - ASRock Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
F.lux (HKCU\...\Flux) (Version:  - )
FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version:  - )
Full Tilt Poker.Eu (HKLM-x32\...\{127BEFB3-24B2-4B44-8E99-AD22C2A5A8ED}) (Version: 5.4.2.WIN.FullTilt.EU - )
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Smart Connect Technology 2.0 x64 (HKLM\...\{54F8B6C7-9B25-4E85-A1E0-26CFB80DE787}) (Version: 2.0.1083.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden
Java 7 Update 65 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation)
Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.20.26 - Oracle Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
Nero 11 DiscSpeed (HKLM-x32\...\{B8B03F99-F600-4D96-ADBD-2F384240FB9C}) (Version: 11.0.00400 - Nero AG)
Nero Core Components 11 (x32 Version: 11.0.15401.1.15 - Nero AG) Hidden
Nero DiscSpeed 11 (x32 Version: 7.0.10400.2.100 - Nero AG) Hidden
Nero DiscSpeed 11 Help (CHM) (x32 Version: 11.0.10000 - Nero AG) Hidden
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PKR (HKLM-x32\...\PKR) (Version:  - PKR Ltd)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PokerTracker 4 (remove only) (HKLM-x32\...\PokerTracker4) (Version:  - )
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)
THX TruStudio (HKLM-x32\...\{AFB907F5-C0E6-4753-8284-DE955EF86AC2}) (Version: 1.00.01 - Creative Technology Limited)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winner Poker (HKLM-x32\...\winnerpoker) (Version:  - )
XFastUSB (HKLM-x32\...\XFastUSB) (Version: 3.02.31 - ASRock Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

10-09-2014 16:35:37 Windows Update
13-09-2014 13:58:45 Wiederherstellungsvorgang
13-09-2014 14:14:02 Windows Update
13-09-2014 14:39:24 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {67CF36F1-5649-498C-A60B-BEA6B50E1DD8} - System32\Tasks\{BDA6003B-594C-4F8F-BAA0-3FFC4963368C} => Firefox.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {6DABB175-62B4-439A-A9C9-DBF6FB687D40} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-03] (Google Inc.)
Task: {76AF1803-5385-45A4-991B-87005ADDB9C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-03] (Google Inc.)
Task: {7A21ED5B-D440-421C-80F6-72B5170156F4} - System32\Tasks\{E32A3CCD-DAFD-47D8-81DC-C6B49F15234A} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {8D56E3BE-EFD8-4517-A779-597CCBDED7F4} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {B3F19F65-F30B-4FC8-B9E3-1B09E04146A4} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {D551CA9E-4F62-41AC-84C6-AD13DAF666DF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-13] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2012-02-09 16:26 - 2012-02-09 16:26 - 00133632 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2012-02-09 16:26 - 2012-02-09 16:26 - 00048128 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2012-02-09 16:26 - 2012-02-09 16:26 - 00036864 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetDetect.dll
2013-04-03 18:56 - 2011-05-19 09:58 - 00246784 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-04-03 18:45 - 2012-09-17 10:23 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2009-08-29 08:00 - 2009-08-29 08:00 - 00966656 _____ () C:\Users\tsubasa\Local Settings\Apps\F.lux\flux.exe
2013-04-03 23:14 - 2014-04-09 10:06 - 00172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2013-04-03 23:14 - 2012-08-14 15:19 - 00999424 _____ () c:\postgreSQL\bin\libxml2.dll
2013-04-03 18:56 - 2011-05-04 16:32 - 00094208 ____N () C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\de-DE\THXAudNB.resources.dll
2014-09-13 19:57 - 2014-09-13 19:57 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\da2db029408c91468db6f8dcc5000ad0\PSIClient.ni.dll
2013-04-03 18:49 - 2012-07-18 06:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-09-13 05:07 - 2014-08-26 10:14 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/14/2014 01:58:02 AM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/14/2014 00:04:44 AM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-14 00:04:44 CESTFATAL:  the database system is starting up

Error: (09/14/2014 00:04:43 AM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 09:55:30 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 07:51:06 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:51:06 CESTFATAL:  the database system is starting up

Error: (09/13/2014 07:51:05 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 07:02:02 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:02:02 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:02:02 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:57 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:57 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:57 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:32 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:32 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:32 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:02 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:02 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:02 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);


System errors:
=============
Error: (09/13/2014 04:02:45 PM) (Source: Microsoft Antimalware) (EventID: 2004) (User: )
Description: Beim Laden der Signaturen wurde von %60 ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.

	Versuchte Signaturen: %24

	Fehlercode: 0x80070002

	Fehlerbeschreibung: Das System kann die angegebene Datei nicht finden. 

	Signaturversion: 0.0.0.0;0.0.0.0

	Modulversion: %600

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Enumeratordienst für tragbare Geräte" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Diagnosesystemhost" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Sitzungs-Manager für Desktopfenster-Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Überwachung verteilter Verknüpfungen (Client)" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Superfetch" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Programmkompatibilitäts-Assistent-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Netzwerkverbindungen" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 100 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Zugriff auf Eingabegeräte" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/11/2014 02:55:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows-Audio-Endpunkterstellung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (09/14/2014 01:58:02 AM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/14/2014 00:04:44 AM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-14 00:04:44 CESTFATAL:  the database system is starting up

Error: (09/14/2014 00:04:43 AM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 09:55:30 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 07:51:06 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:51:06 CESTFATAL:  the database system is starting up

Error: (09/13/2014 07:51:05 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume    ****Error in initialize NetDetect, status = 0x2

Error: (09/13/2014 07:02:02 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:02:02 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:02:02 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:57 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:57 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:57 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:32 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:32 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:32 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);

Error: (09/13/2014 07:01:02 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: 2014-09-13 19:01:02 CESTERROR:  prepared statement "insertplayer" already exists
2014-09-13 19:01:02 CESTSTATEMENT:  PREPARE INSERTPLAYER (text,smallint,integer,integer,smallint) AS  Insert into players (playername,pokersite_id,cashhands,tourneyhands,optimizationstatus) values ($1,$2,$3,$4,$5) RETURNING player_id; 
	
	PREPARE CSUpdate (integer,integer,smallint,smallint,smallint,integer,
	integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer,integer,integer,integer,
	integer,integer)
	as 
	Update CompiledPlayerResults set totalhands = totalhands + $6
	, TotalAmountWonincents = TotalAmountWonincents + $7
	, TotalRakeincents = TotalRakeincents + $8
	, TotalBBsWon = TotalBBsWon + $9
	, VPIPHands = VPIPHands + $10
	, PFRHands = PFRHands + $11
	, CouldColdCall = CouldColdCall + $12
	, DidColdCall = DidColdCall + $13
	, CouldThreeBet = CouldThreeBet + $14
	, DidThreeBet = DidThreeBet + $15
	, CouldSqueeze = CouldSqueeze + $16
	, DidSqueeze = DidSqueeze + $17
	, FacingTwoPreflopRaisers = FacingTwoPreflopRaisers + $18
	, CalledTwoPreflopRaisers = CalledTwoPreflopRaisers + $19
	, RaisedTwoPreflopRaisers = RaisedTwoPreflopRaisers + $20
	, SmallBlindStealAttempted = SmallBlindStealAttempted + $21
	, SmallBlindStealDefended = SmallBlindStealDefended + $22
	, SmallBlindStealReraised = SmallBlindStealReraised + $23
	, BigBlindStealAttempted = BigBlindStealAttempted + $24
	, BigBlindStealDefended = BigBlindStealDefended + $25
	, BigBlindStealReraised = BigBlindStealReraised + $26
	, SawNonSmallShowdown = SawNonSmallShowdown + $27
	, WonNonSmallShowdown = WonNonSmallShowdown + $28
	, SawLargeShowdown = SawLargeShowdown + $29
	, WonLargeShowdown = WonLargeShowdown + $30
	, SawNonSmallShowdownLimpedFlop = SawNonSmallShowdownLimpedFlop + $31
	, WonNonSmallShowdownLimpedFlop = WonNonSmallShowdownLimpedFlop + $32
	, SawLargeShowdownLimpedFlop = SawLargeShowdownLimpedFlop + $33
	, WonLargeShowdownLimpedFlop = WonLargeShowdownLimpedFlop + $34
	, WonHand = WonHand + $35
	, WonHandWhenSawFlop = WonHandWhenSawFlop + $36
	, WonHandWhenSawTurn = WonHandWhenSawTurn + $37
	, WonHandWhenSawRiver = WonHandWhenSawRiver + $38
	, FacedThreeBetPreflop = FacedThreeBetPreflop + $39
	, FoldedToThreeBetPreflop = FoldedToThreeBetPreflop + $40
	, CalledThreeBetPreflop = CalledThreeBetPreflop + $41
	, RaisedThreeBetPreflop = RaisedThreeBetPreflop + $42
	, FacedFourBetPreflop = FacedFourBetPreflop + $43
	, FoldedToFourBetPreflop = FoldedToFourBetPreflop + $44
	, CalledFourBetPreflop = CalledFourBetPreflop + $45
	, RaisedFourBetPreflop = RaisedFourBetPreflop + $46
	, TurnFoldIPPassOnFlopCB = TurnFoldIPPassOnFlopCB + $47
	, TurnCallIPPassOnFlopCB = TurnCallIPPassOnFlopCB + $48
	, TurnRaiseIPPassOnFlopCB = TurnRaiseIPPassOnFlopCB + $49
	, RiverFoldIPPassOnTurnCB = RiverFoldIPPassOnTurnCB + $50
	, RiverCallIPPassOnTurnCB = RiverCallIPPassOnTurnCB + $51
	, RiverRaiseIPPassOnTurnCB = RiverRaiseIPPassOnTurnCB + $52
	, SawFlop = SawFlop + $53
	, SawShowdown = SawShowdown + $54
	, WonShowdown = WonShowdown + $55
	, TotalBets = TotalBets + $56
	, TotalCalls = TotalCalls + $57
	, FlopContinuationBetPossible = FlopContinuationBetPossible + $58
	, FlopContinuationBetMade = FlopContinuationBetMade + $59
	, TurnContinuationBetPossible = TurnContinuationBetPossible + $60
	, TurnContinuationBetMade = TurnContinuationBetMade + $61
	, RiverContinuationBetPossible = RiverContinuationBetPossible + $62
	, RiverContinuationBetMade = RiverContinuationBetMade + $63
	, FacingFlopContinuationBet = FacingFlopContinuationBet + $64
	, FoldedToFlopContinuationBet = FoldedToFlopContinuationBet + $65
	, CalledFlopContinuationBet = CalledFlopContinuationBet + $66
	, RaisedFlopContinuationBet = RaisedFlopContinuationBet + $67
	, FacingTurnContinuationBet = FacingTurnContinuationBet + $68
	, FoldedToTurnContinuationBet = FoldedToTurnContinuationBet + $69
	, CalledTurnContinuationBet = CalledTurnContinuationBet + $70
	, RaisedTurnContinuationBet = RaisedTurnContinuationBet + $71
	, FacingRiverContinuationBet = FacingRiverContinuationBet + $72
	, FoldedToRiverContinuationBet = FoldedToRiverContinuationBet + $73
	, CalledRiverContinuationBet = CalledRiverContinuationBet + $74
	, RaisedRiverContinuationBet = RaisedRiverContinuationBet + $75
	, TotalPostFlopStreetsSeen = TotalPostFlopStreetsSeen + $76
	, totalaggressivepostflopstreetsseen = totalaggressivepostflopstreetsseen + $77
	 where compiledplayerresults_id = (select compiledplayerresults_id from compiledplayerresults where player_id = $1
	and playedyearandmonth = $2
	and numberofplayers = $3
	and gametype_id = $4
	and bbgroup_id = $5 limit 1);


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3450 CPU @ 3.10GHz
Percentage of memory in use: 42%
Total physical RAM: 3980.42 MB
Available physical RAM: 2286.51 MB
Total Pagefile: 7959.02 MB
Available Pagefile: 4872.26 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:53.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 06820C51)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 14.09.2014, 15:07

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

hmup · 14.09.2014, 15:45

adw cleaner:

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 14/09/2014 um 16:21:28
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : linkslang - LINKSLANG-PC
# Gestartet von : C:\Users\tsubasa\Downloads\AdwCleaner_3.310.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\LINKSL~1\AppData\Local\Temp\OCS

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.1 (x86 de)

[ Datei : C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\prefs.js ]


[ Datei : C:\Users\tsubasa\AppData\Roaming\Mozilla\Firefox\Profiles\is0ld3io.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://de.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [1434 octets] - [14/09/2014 16:20:39]
AdwCleaner[S0].txt - [1311 octets] - [14/09/2014 16:21:28]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [1371 octets] ##########

--- --- ---

[/CODE]

jrt:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by linkslang on 14.09.2014 at 16:32:03,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\linkslang\AppData\Roaming\mozilla\firefox\profiles\8x0a4lmv.default\minidumps [3 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.09.2014 at 16:35:45,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

frst:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by linkslang (administrator) on LINKSLANG-PC on 14-09-2014 16:41:14
Running from C:\Users\tsubasa\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Thisisu) C:\Users\tsubasa\Downloads\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-04-03] (FNet Co., Ltd.)
HKLM-x32\...\Run: [THX TruStudio NB Settings] => C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-07-30] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-05-12] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-04-03] (Microsoft Corporation)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [F.lux] => C:\Users\linkslang\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1000\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [F.lux] => C:\Users\tsubasa\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\Run: [Raptr] => C:\PROGRA~2\Raptr\raptrstub.exe --startup
HKU\S-1-5-21-3419079025-636903126-738683945-1001\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-03] (Google Inc.)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [F.lux] => C:\Users\linkslang\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-30] (AMD)
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\Run: [Raptr] => C:\PROGRA~2\Raptr\raptrstub.exe --startup
HKU\S-1-5-21-3419079025-636903126-738683945-1003\...\MountPoints2: {077cca47-9c7d-11e2-99f2-806e6f6e6963} - D:\ASRSetup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF3856C259C30CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{F615ACD4-6647-45AC-A844-CF8FF386EFA4}: [NameServer] 62.220.18.8 89.246.64.8

FireFox:
========
FF ProfilePath: C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-12-29]
FF Extension: NoScript - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-09-13]
FF Extension: Adblock Plus - C:\Users\linkslang\AppData\Roaming\Mozilla\Firefox\Profiles\8x0a4lmv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-03]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR DefaultSearchURL: Default -> {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-03]
CHR Extension: (Google-Suche) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-03]
CHR Extension: (Google Mail) - C:\Users\linkslang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-04-09] (PostgreSQL Global Development Group) [File not signed]
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-04-23] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-04-03] (FNet Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-09-14] ()
S3 MBfilt; system32\drivers\MBfilt64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-14 16:35 - 2014-09-14 16:35 - 00000764 _____ () C:\Users\linkslang\Desktop\JRT.txt
2014-09-14 16:31 - 2014-09-14 16:31 - 00000000 ____D () C:\Windows\ERUNT
2014-09-14 16:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-14 16:19 - 2014-09-14 16:21 - 00000000 ____D () C:\AdwCleaner
2014-09-14 16:18 - 2014-09-14 16:18 - 01373475 _____ () C:\Users\tsubasa\Downloads\AdwCleaner_3.310.exe
2014-09-14 16:18 - 2014-09-14 16:18 - 01016261 _____ (Thisisu) C:\Users\tsubasa\Downloads\JRT.exe
2014-09-14 15:34 - 2014-09-14 15:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-14 02:18 - 2014-09-14 02:18 - 00066846 _____ () C:\Users\tsubasa\Downloads\Addition.txt
2014-09-13 21:57 - 2014-09-13 21:57 - 00009720 _____ () C:\Users\tsubasa\Downloads\FRST.zip
2014-09-13 21:52 - 2014-09-14 16:41 - 00018433 _____ () C:\Users\tsubasa\Downloads\FRST.txt
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-09-13 21:49 - 2014-09-13 21:49 - 01110476 _____ () C:\Users\tsubasa\Downloads\7z920.exe
2014-09-13 21:33 - 2014-09-13 21:40 - 00008909 _____ () C:\Users\linkslang\Downloads\FRST1.rar
2014-09-13 21:33 - 2014-09-13 21:40 - 00007936 _____ () C:\Users\linkslang\Downloads\frst.rar
2014-09-13 21:25 - 2014-09-13 21:25 - 00054035 _____ () C:\Users\linkslang\Downloads\FRST1.txt
2014-09-13 21:24 - 2014-09-13 21:24 - 00107497 _____ () C:\Users\linkslang\Downloads\frst.txt
2014-09-13 20:33 - 2014-09-14 16:41 - 00000000 ____D () C:\FRST
2014-09-13 20:31 - 2014-09-13 20:32 - 00000480 _____ () C:\Users\tsubasa\Downloads\defogger_disable.log
2014-09-13 20:31 - 2014-09-13 20:31 - 00000000 _____ () C:\Users\linkslang\defogger_reenable
2014-09-13 20:29 - 2014-09-13 20:29 - 02105856 _____ (Farbar) C:\Users\tsubasa\Downloads\FRST64.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00380416 _____ () C:\Users\tsubasa\Downloads\Gmer-19357.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00050477 _____ () C:\Users\tsubasa\Downloads\Defogger.exe
2014-09-13 19:29 - 2014-09-13 19:29 - 00002763 _____ () C:\malwarescasn.txt
2014-09-13 19:08 - 2014-09-13 20:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-13 19:08 - 2014-09-13 19:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-13 19:08 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-13 19:08 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-13 19:04 - 2014-09-13 19:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tsubasa\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-13 17:05 - 2014-09-13 17:07 - 17703856 _____ (Adobe Systems Inc.) C:\Users\tsubasa\Downloads\AdobeAIRInstaller.exe
2014-09-13 16:42 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-13 16:42 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-13 16:42 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 16:42 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 16:42 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-13 16:42 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-13 16:42 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 16:42 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 16:42 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 16:42 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-13 16:42 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-13 16:42 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 16:42 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-13 16:42 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 16:42 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-13 16:42 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 16:42 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-13 16:42 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-13 16:42 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-13 16:42 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 16:42 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-13 16:42 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-13 16:42 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-13 16:42 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-13 16:42 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-13 16:42 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-13 16:42 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-13 16:42 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-13 16:42 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 16:42 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-13 16:42 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-13 16:42 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-13 16:42 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-13 16:42 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 16:42 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-13 16:42 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 16:42 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-13 16:42 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-13 16:42 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-13 16:42 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-13 16:42 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-13 16:42 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 16:42 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-13 16:42 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 16:42 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-13 16:42 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-13 16:42 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-13 16:42 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 16:42 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-13 16:42 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-13 16:42 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-13 16:42 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-13 16:39 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 16:39 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-13 16:37 - 2014-09-13 16:37 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-13 16:24 - 2014-09-13 16:24 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-09-13 16:22 - 2014-09-13 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-13 16:17 - 2014-09-13 16:18 - 05329480 _____ (Secunia) C:\Users\tsubasa\Downloads\PSISetup_3.0.0.9016.exe
2014-09-13 16:15 - 2014-09-13 16:20 - 36013664 _____ (Skype Technologies S.A.) C:\Users\tsubasa\Downloads\SkypeSetupFull_6.20.73.104.exe
2014-09-13 16:08 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-13 16:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-13 16:08 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-13 16:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-13 16:07 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-13 16:07 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-13 16:07 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-13 16:07 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-13 16:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-13 16:07 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-13 16:07 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieUserList
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieSiteList
2014-09-10 20:41 - 2014-09-14 16:22 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-09-10 14:23 - 2014-09-10 14:23 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\0F1L1I1P0H1L1E1E1F
2014-09-09 22:48 - 2014-09-13 16:49 - 09392128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-08-28 19:49 - 2014-08-28 19:49 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-08-28 19:49 - 2014-08-28 19:49 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-08-28 19:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 19:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 19:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 14:10 - 2014-08-20 14:10 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-20 14:05 - 2014-08-20 14:07 - 96138664 _____ (Oracle Corporation) C:\Users\tsubasa\Downloads\jre-8u20-windows-x64.exe
2014-08-19 21:49 - 2014-08-19 21:49 - 02174848 _____ () C:\Users\tsubasa\Downloads\instsf450.exe
2014-08-17 19:21 - 2014-08-17 19:22 - 00000000 _____ () C:\Users\tsubasa\AppData\Local\{A5DC64F6-07D4-4D6F-9CC9-11BBDDC5F156}
2014-08-17 19:21 - 2014-08-17 19:21 - 00000000 ____H () C:\Users\tsubasa\AppData\Local\BITBC2.tmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-14 16:41 - 2014-09-13 21:52 - 00018433 _____ () C:\Users\tsubasa\Downloads\FRST.txt
2014-09-14 16:41 - 2014-09-13 20:33 - 00000000 ____D () C:\FRST
2014-09-14 16:35 - 2014-09-14 16:35 - 00000764 _____ () C:\Users\linkslang\Desktop\JRT.txt
2014-09-14 16:33 - 2013-04-02 01:13 - 01507681 _____ () C:\Windows\WindowsUpdate.log
2014-09-14 16:31 - 2014-09-14 16:31 - 00000000 ____D () C:\Windows\ERUNT
2014-09-14 16:29 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-14 16:29 - 2009-07-14 06:45 - 00023344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-14 16:26 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-09-14 16:26 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-09-14 16:26 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-14 16:24 - 2013-04-03 18:49 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-09-14 16:24 - 2013-04-03 18:43 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-14 16:22 - 2014-09-10 20:41 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2014-09-14 16:22 - 2013-04-03 21:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-14 16:22 - 2013-04-03 18:53 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys
2014-09-14 16:22 - 2013-04-03 18:44 - 00918274 _____ () C:\Windows\PFRO.log
2014-09-14 16:22 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-14 16:22 - 2009-07-14 06:51 - 00098063 _____ () C:\Windows\setupact.log
2014-09-14 16:21 - 2014-09-14 16:19 - 00000000 ____D () C:\AdwCleaner
2014-09-14 16:18 - 2014-09-14 16:18 - 01373475 _____ () C:\Users\tsubasa\Downloads\AdwCleaner_3.310.exe
2014-09-14 16:18 - 2014-09-14 16:18 - 01016261 _____ (Thisisu) C:\Users\tsubasa\Downloads\JRT.exe
2014-09-14 16:17 - 2013-04-03 23:25 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\HoldemManager
2014-09-14 15:48 - 2013-04-03 22:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-14 15:45 - 2013-04-03 18:43 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-14 15:35 - 2014-09-14 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-14 02:18 - 2014-09-14 02:18 - 00066846 _____ () C:\Users\tsubasa\Downloads\Addition.txt
2014-09-13 21:57 - 2014-09-13 21:57 - 00009720 _____ () C:\Users\tsubasa\Downloads\FRST.zip
2014-09-13 21:55 - 2013-04-04 00:13 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-09-13 21:50 - 2014-09-13 21:50 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-09-13 21:49 - 2014-09-13 21:49 - 01110476 _____ () C:\Users\tsubasa\Downloads\7z920.exe
2014-09-13 21:40 - 2014-09-13 21:33 - 00008909 _____ () C:\Users\linkslang\Downloads\FRST1.rar
2014-09-13 21:40 - 2014-09-13 21:33 - 00007936 _____ () C:\Users\linkslang\Downloads\frst.rar
2014-09-13 21:33 - 2013-04-04 00:13 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\WinRAR
2014-09-13 21:25 - 2014-09-13 21:25 - 00054035 _____ () C:\Users\linkslang\Downloads\FRST1.txt
2014-09-13 21:24 - 2014-09-13 21:24 - 00107497 _____ () C:\Users\linkslang\Downloads\frst.txt
2014-09-13 20:32 - 2014-09-13 20:31 - 00000480 _____ () C:\Users\tsubasa\Downloads\defogger_disable.log
2014-09-13 20:31 - 2014-09-13 20:31 - 00000000 _____ () C:\Users\linkslang\defogger_reenable
2014-09-13 20:31 - 2013-04-02 20:12 - 00000000 ____D () C:\Users\linkslang
2014-09-13 20:29 - 2014-09-13 20:29 - 02105856 _____ (Farbar) C:\Users\tsubasa\Downloads\FRST64.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00380416 _____ () C:\Users\tsubasa\Downloads\Gmer-19357.exe
2014-09-13 20:29 - 2014-09-13 20:29 - 00050477 _____ () C:\Users\tsubasa\Downloads\Defogger.exe
2014-09-13 20:07 - 2014-09-13 19:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-13 19:50 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-09-13 19:29 - 2014-09-13 19:29 - 00002763 _____ () C:\malwarescasn.txt
2014-09-13 19:08 - 2014-09-13 19:08 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-13 19:08 - 2014-09-13 19:08 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-13 19:07 - 2013-04-03 14:20 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Skype
2014-09-13 19:06 - 2014-09-13 19:04 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tsubasa\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-13 19:00 - 2013-12-19 17:41 - 00300550 _____ () C:\rusherr.txt
2014-09-13 19:00 - 2013-05-20 23:31 - 00000000 ____D () C:\Users\linkslang\AppData\Local\FullTiltPoker.eu
2014-09-13 19:00 - 2013-05-20 23:21 - 00000000 ____D () C:\Program Files (x86)\Full Tilt Poker.Eu
2014-09-13 17:14 - 2013-04-03 23:05 - 00000000 ____D () C:\Users\linkslang\AppData\Local\Adobe
2014-09-13 17:14 - 2013-04-03 22:04 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-13 17:14 - 2013-04-03 22:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-13 17:14 - 2013-04-03 22:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-13 17:07 - 2014-09-13 17:05 - 17703856 _____ (Adobe Systems Inc.) C:\Users\tsubasa\Downloads\AdobeAIRInstaller.exe
2014-09-13 16:49 - 2014-09-09 22:48 - 09392128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 16:42 - 2013-04-03 18:50 - 01597378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-13 16:41 - 2013-07-22 22:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 16:41 - 2013-04-03 19:14 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-13 16:41 - 2013-04-03 19:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-13 16:41 - 2013-04-03 19:14 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-13 16:41 - 2013-04-03 19:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-13 16:39 - 2014-06-12 17:56 - 00006386 _____ () C:\Windows\SecuniaPackage.log
2014-09-13 16:39 - 2014-05-06 19:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-13 16:39 - 2013-04-03 20:24 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-13 16:37 - 2014-09-13 16:37 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-13 16:37 - 2013-04-03 21:58 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-13 16:24 - 2014-09-13 16:24 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-09-13 16:22 - 2014-09-13 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-13 16:22 - 2014-04-03 16:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-09-13 16:22 - 2014-04-03 16:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-13 16:22 - 2013-04-03 22:38 - 00000000 ____D () C:\ProgramData\Skype
2014-09-13 16:20 - 2014-09-13 16:15 - 36013664 _____ (Skype Technologies S.A.) C:\Users\tsubasa\Downloads\SkypeSetupFull_6.20.73.104.exe
2014-09-13 16:18 - 2014-09-13 16:17 - 05329480 _____ (Secunia) C:\Users\tsubasa\Downloads\PSISetup_3.0.0.9016.exe
2014-09-13 16:05 - 2013-04-03 22:45 - 00000000 ____D () C:\Users\tsubasa
2014-09-13 16:02 - 2014-04-14 01:03 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Battle.net
2014-09-13 16:02 - 2014-01-07 21:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PKR
2014-09-13 16:02 - 2013-12-11 04:27 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\vlc
2014-09-13 16:02 - 2013-06-27 04:17 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2014-09-13 16:02 - 2013-06-07 20:39 - 00000000 ____D () C:\Users\linkslang\AppData\Local\PokerStars.EU
2014-09-13 16:02 - 2013-04-18 00:32 - 00000000 ____D () C:\Program Files (x86)\FileHippo.com
2014-09-13 16:02 - 2013-04-10 03:21 - 00000000 ____D () C:\Users\tsubasa\AppData\Roaming\dvdcss
2014-09-13 16:02 - 2013-04-10 02:39 - 00000000 ____D () C:\Users\tsubasa\AppData\Local\Equilab
2014-09-13 16:02 - 2013-04-03 23:14 - 00000000 ____D () C:\Users\postgres
2014-09-13 16:02 - 2013-04-03 22:04 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-13 16:02 - 2013-04-03 22:04 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\schemas
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-09-13 16:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-13 16:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-09-13 15:59 - 2014-07-24 18:26 - 00000000 ____D () C:\Program Files (x86)\Winner Poker
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieUserList
2014-09-13 15:01 - 2014-09-13 15:01 - 00000000 __SHD () C:\Users\tsubasa\AppData\Local\EmieSiteList
2014-09-12 04:52 - 2014-04-14 01:03 - 00000000 ____D () C:\Users\tsubasa\AppData\Local\Battle.net
2014-09-10 14:23 - 2014-09-10 14:23 - 00000000 ____D () C:\Users\linkslang\AppData\Roaming\0F1L1I1P0H1L1E1E1F
2014-09-09 21:34 - 2013-07-28 19:54 - 00000000 ____D () C:\Users\linkslang\AppData\Local\CrashDumps
2014-09-09 17:12 - 2013-11-11 17:18 - 00001736 _____ () C:\speederr.txt
2014-09-05 04:10 - 2014-09-13 16:07 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-13 16:07 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-30 16:44 - 2013-06-07 20:39 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-08-28 23:16 - 2013-04-03 18:54 - 00064408 _____ () C:\Users\linkslang\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-28 22:44 - 2013-04-03 22:46 - 00064408 _____ () C:\Users\tsubasa\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-28 19:56 - 2009-07-14 06:45 - 00296440 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 19:49 - 2014-08-28 19:49 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-08-28 19:49 - 2014-08-28 19:49 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-08-28 19:49 - 2014-03-06 16:06 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-08-28 04:09 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-23 04:07 - 2014-08-28 19:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 19:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 19:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 02:23 - 2014-04-14 01:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-20 14:16 - 2014-06-16 14:24 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-20 14:16 - 2014-06-16 14:24 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-20 14:10 - 2014-08-20 14:10 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-20 14:10 - 2014-04-22 14:30 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-08-20 14:10 - 2014-04-22 14:30 - 00000000 ____D () C:\Program Files\Java
2014-08-20 14:07 - 2014-08-20 14:05 - 96138664 _____ (Oracle Corporation) C:\Users\tsubasa\Downloads\jre-8u20-windows-x64.exe
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\tsubasa\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\postgres\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00001007 _____ () C:\Users\linkslang\Desktop\SpeedFan.lnk
2014-08-19 21:52 - 2013-04-04 00:04 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-08-19 21:52 - 2013-04-04 00:04 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-19 21:49 - 2014-08-19 21:49 - 02174848 _____ () C:\Users\tsubasa\Downloads\instsf450.exe
2014-08-19 20:05 - 2014-09-13 16:42 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-13 16:42 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 02:03 - 2014-04-14 01:28 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-08-19 01:01 - 2014-09-13 16:42 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-13 16:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-13 16:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-13 16:42 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-13 16:42 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-13 16:42 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-13 16:42 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-13 16:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-13 16:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-13 16:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-13 16:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-13 16:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-13 16:42 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-13 16:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-13 16:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 23:57 - 2014-09-13 16:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 23:56 - 2014-09-13 16:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 23:51 - 2014-09-13 16:42 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 23:46 - 2014-09-13 16:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 23:45 - 2014-09-13 16:42 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 23:45 - 2014-09-13 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 23:44 - 2014-09-13 16:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 23:44 - 2014-09-13 16:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 23:42 - 2014-09-13 16:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 23:40 - 2014-09-13 16:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 23:39 - 2014-09-13 16:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 23:38 - 2014-09-13 16:42 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 23:37 - 2014-09-13 16:42 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 23:36 - 2014-09-13 16:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 23:35 - 2014-09-13 16:42 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 23:27 - 2014-09-13 16:42 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 23:25 - 2014-09-13 16:42 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 23:25 - 2014-09-13 16:42 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 23:23 - 2014-09-13 16:42 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 23:23 - 2014-09-13 16:42 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 23:22 - 2014-09-13 16:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 23:19 - 2014-09-13 16:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 23:17 - 2014-09-13 16:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 23:17 - 2014-09-13 16:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 23:16 - 2014-09-13 16:42 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 23:15 - 2014-09-13 16:42 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 23:15 - 2014-09-13 16:42 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 23:09 - 2014-09-13 16:42 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 23:08 - 2014-09-13 16:42 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 23:07 - 2014-09-13 16:42 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 22:55 - 2014-09-13 16:42 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 22:46 - 2014-09-13 16:42 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 22:38 - 2014-09-13 16:42 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 22:38 - 2014-09-13 16:42 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 22:36 - 2014-09-13 16:42 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-17 19:22 - 2014-08-17 19:21 - 00000000 _____ () C:\Users\tsubasa\AppData\Local\{A5DC64F6-07D4-4D6F-9CC9-11BBDDC5F156}
2014-08-17 19:21 - 2014-08-17 19:21 - 00000000 ____H () C:\Users\tsubasa\AppData\Local\BITBC2.tmp
2014-08-15 14:49 - 2013-04-03 23:15 - 00001088 _____ () C:\Users\Public\Desktop\HoldemManager2.lnk
2014-08-15 14:49 - 2013-04-03 23:15 - 00000000 ____D () C:\Program Files (x86)\Holdem Manager 2

Some content of TEMP:
====================
C:\Users\linkslang\AppData\Local\Temp\oa21qpgt.dll
C:\Users\linkslang\AppData\Local\Temp\ptuCBE9_tmp.exe
C:\Users\linkslang\AppData\Local\Temp\qmk00lt4.dll
C:\Users\linkslang\AppData\Local\Temp\Quarantine.exe
C:\Users\linkslang\AppData\Local\Temp\raptrpatch.exe
C:\Users\linkslang\AppData\Local\Temp\raptr_stub.exe
C:\Users\linkslang\AppData\Local\Temp\sfamcc00001.dll
C:\Users\linkslang\AppData\Local\Temp\sfamcc00002.dll
C:\Users\linkslang\AppData\Local\Temp\sfextra.dll
C:\Users\linkslang\AppData\Local\Temp\xmlUpdater.exe
C:\Users\tsubasa\AppData\Local\Temp\vlc-2.1.3-win32.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-10 14:15

==================== End Of Log ============================

--- --- ---

[/CODE]

frst addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by linkslang at 2014-09-14 16:41:39
Running from C:\Users\tsubasa\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 15.0.0.249 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31129 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1129.1143.20969 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{853A112F-241F-E344-4636-103C25D3751E}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81129.1203 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.1.000 - Asmedia Technology)
ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.188 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
ASRock InstantBoot v1.29 (HKLM-x32\...\ASRock InstantBoot_is1) (Version:  - )
ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version:  - ASRock Inc.)
ASRock XFast RAM v2.0.9 (HKLM\...\ASRock XFast RAM_is1) (Version:  - ASRock Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1129.1142.20969 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1129.1143.20969 - Advanced Micro Devices, Inc.) Hidden
F.lux (HKCU\...\Flux) (Version:  - )
FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version:  - )
Full Tilt Poker.Eu (HKLM-x32\...\{127BEFB3-24B2-4B44-8E99-AD22C2A5A8ED}) (Version: 5.4.2.WIN.FullTilt.EU - )
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Smart Connect Technology 2.0 x64 (HKLM\...\{54F8B6C7-9B25-4E85-A1E0-26CFB80DE787}) (Version: 2.0.1083.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden
Java 7 Update 65 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation)
Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.20.26 - Oracle Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.1 (x86 de)) (Version: 32.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
Nero 11 DiscSpeed (HKLM-x32\...\{B8B03F99-F600-4D96-ADBD-2F384240FB9C}) (Version: 11.0.00400 - Nero AG)
Nero Core Components 11 (x32 Version: 11.0.15401.1.15 - Nero AG) Hidden
Nero DiscSpeed 11 (x32 Version: 7.0.10400.2.100 - Nero AG) Hidden
Nero DiscSpeed 11 Help (CHM) (x32 Version: 11.0.10000 - Nero AG) Hidden
nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PKR (HKLM-x32\...\PKR) (Version:  - PKR Ltd)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PokerTracker 4 (remove only) (HKLM-x32\...\PokerTracker4) (Version:  - )
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)
THX TruStudio (HKLM-x32\...\{AFB907F5-C0E6-4753-8284-DE955EF86AC2}) (Version: 1.00.01 - Creative Technology Limited)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winner Poker (HKLM-x32\...\winnerpoker) (Version:  - )
XFastUSB (HKLM-x32\...\XFastUSB) (Version: 3.02.31 - ASRock Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

10-09-2014 16:35:37 Windows Update
13-09-2014 13:58:45 Wiederherstellungsvorgang
13-09-2014 14:14:02 Windows Update
13-09-2014 14:39:24 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {67CF36F1-5649-498C-A60B-BEA6B50E1DD8} - System32\Tasks\{BDA6003B-594C-4F8F-BAA0-3FFC4963368C} => Firefox.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {6DABB175-62B4-439A-A9C9-DBF6FB687D40} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-03] (Google Inc.)
Task: {76AF1803-5385-45A4-991B-87005ADDB9C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-03] (Google Inc.)
Task: {7A21ED5B-D440-421C-80F6-72B5170156F4} - System32\Tasks\{E32A3CCD-DAFD-47D8-81DC-C6B49F15234A} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {8D56E3BE-EFD8-4517-A779-597CCBDED7F4} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {B3F19F65-F30B-4FC8-B9E3-1B09E04146A4} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {D551CA9E-4F62-41AC-84C6-AD13DAF666DF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-13] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2012-02-09 16:26 - 2012-02-09 16:26 - 00133632 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2012-02-09 16:26 - 2012-02-09 16:26 - 00048128 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2012-02-09 16:26 - 2012-02-09 16:26 - 00036864 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetDetect.dll
2013-04-03 18:45 - 2012-09-17 10:23 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-04-03 23:14 - 2014-04-09 10:06 - 00172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2013-04-03 23:14 - 2012-08-14 15:19 - 00999424 _____ () c:\postgreSQL\bin\libxml2.dll
2014-09-13 19:57 - 2014-09-13 19:57 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\da2db029408c91468db6f8dcc5000ad0\PSIClient.ni.dll
2013-04-03 18:49 - 2012-07-18 06:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-04-03 18:56 - 2011-05-04 16:32 - 00094208 ____N () C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\de-DE\THXAudNB.resources.dll
2014-09-14 15:34 - 2014-09-14 15:34 - 03716720 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (09/14/2014 04:40:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {3EEF301F-B596-4C0B-BD92-013BEAFCE793}


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3450 CPU @ 3.10GHz
Percentage of memory in use: 47%
Total physical RAM: 3980.42 MB
Available physical RAM: 2085.86 MB
Total Pagefile: 7959.02 MB
Available Pagefile: 4876.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:53.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 06820C51)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 14.09.2014, 15:49

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

hmup · 14.09.2014, 17:42

mbam:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 14.09.2014
Suchlauf-Zeit: 16:57:15
Logdatei: 
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.14.05
Rootkit Datenbank: v2014.09.13.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: linkslang

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 390953
Verstrichene Zeit: 6 Min, 19 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

eset

hab leider nicht gefunden,wo/wie ich microsoft security essentials ausschalte--firewall hab ich während des deaktiviert...)

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=f7b03eb98c0ffe469a1a028b85e971da
# engine=20148
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-09-14 04:26:43
# local_time=2014-09-14 06:26:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 92713 52025319 0 0
# scanned=267470
# found=14
# cleaned=0
# scan_time=3294
sh=16068B8977B4DC562AE782D91BC009472667E331 ft=1 fh=c3b5a87b7d152749 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\LINKSL~1\AppData\Local\Temp\OCS\ocs_v71a.exe.vir"
sh=08A0C25B0BF40535697C1C584ACCDA490D6BC882 ft=1 fh=dbe7f66a50ce49ed vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\LINKSL~1\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=63CE7E7CB34E5780F5C01C3CF78BB6BBB54AB180 ft=1 fh=71eb29bfedca86ae vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Holdem Manager 2\Blitz.dll"
sh=CACF870A167DC61A440506EBCF9E531DD75F489C ft=1 fh=0ea012c3ebc8739e vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Holdem Manager 2\StarsCommunicator.hm2"
sh=257BA1FF6C3AD011AC3D8F456A990677BEA8F3CB ft=1 fh=bfeab316cc3d45a7 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\iPokerCommunicator.pt4"
sh=74945D15923FF9ED8ADF2AE7EE28559E2D8463BD ft=1 fh=dd930364d7addc9f vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\PartyCommunicator.pt4"
sh=C32E6DFE49935A64A25FA706FEEBD4B76EE5318B ft=1 fh=579dae9bad35b7b5 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\StarsCommunicator.pt4"
sh=3569FFFCD42127C3F5F70846CEDFB8E3AC23BDDE ft=1 fh=b9961421b186dde1 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\TiltCommunicator.pt3"
sh=D00FCAB1B123F734938226FF82A5ABEA365D7646 ft=1 fh=8c297ad99bdadb68 vn="möglicherweise Variante von Win32/PrimeCasino evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\AppData\Local\Temp\24h6347.tmp"
sh=09D7EA7497A0070AD68684BA545E0EF420DEF157 ft=1 fh=289ce696eef47723 vn="Variante von Win32/PrimeCasino evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\AppData\Local\Temp\lad5EC5.tmp"
sh=8359B3168973172CD654567613BC65A26859347B ft=1 fh=a21d7903859c0edf vn="möglicherweise Variante von Win32/PrimeCasino evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\AppData\Local\Temp\uni9188.tmp"
sh=CEC72D6F2756A311FF58C55B6B2309FAB380B8EA ft=1 fh=c54d90a80dc91465 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\Downloads\Java Runtime Environment 64 Bit - CHIP-Installer.exe"
sh=9AC91382D6EA80D50471AEE4FC8785E21151EE5F ft=1 fh=5a4cd7a39ff363f6 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\Downloads\Notepad - CHIP-Installer.exe"
sh=165619B4D241323B56051612C805A9A050BC3832 ft=1 fh=e477fedec4fe78c7 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\linkslang\Downloads\OpenOffice - CHIP-Installer.exe"

cosinus · 14.09.2014, 22:23

Zitat:

C:\Program Files (x86)\Holdem Manager 2
C:\Program Files (x86)\PokerTracker 4

Ist derartige Software auf diesem Rechner gewollt?

hmup · 15.09.2014, 00:13

hi,

ja,ist gewollt.

cosinus · 15.09.2014, 09:09

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\linkslang\Downloads\Java Runtime Environment 64 Bit - CHIP-Installer.exe
C:\Users\linkslang\Downloads\Notepad - CHIP-Installer.exe
C:\Users\linkslang\Downloads\OpenOffice - CHIP-Installer.exe
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

hmup · 15.09.2014, 14:30

fixlog:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014
Ran by linkslang at 2014-09-15 15:27:04 Run:1
Running from C:\Users\tsubasa\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\linkslang\Downloads\Java Runtime Environment 64 Bit - CHIP-Installer.exe
C:\Users\linkslang\Downloads\Notepad - CHIP-Installer.exe
C:\Users\linkslang\Downloads\OpenOffice - CHIP-Installer.exe
EmptyTemp:
         
*****************

C:\Users\linkslang\Downloads\Java Runtime Environment 64 Bit - CHIP-Installer.exe => Moved successfully.
C:\Users\linkslang\Downloads\Notepad - CHIP-Installer.exe => Moved successfully.
C:\Users\linkslang\Downloads\OpenOffice - CHIP-Installer.exe => Moved successfully.
EmptyTemp: => Removed 1.7 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

cosinus · 15.09.2014, 14:49

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

hmup · 15.09.2014, 15:38

ansonsten keine ( pc

) probleme...

allerbesten dank

13.09.2014, 23:05	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	win7 -malwerebytesscan erkennt probleme: "yahoo safe finder" Addition.txt Logfile fehlt, bitte nachreichen __________________ Logfiles bitte immer in CODE-Tags posten

win7 -malwerebytesscan erkennt probleme: "yahoo safe finder"

Log-Analyse und Auswertung: win7 -malwerebytesscan erkennt probleme: "yahoo safe finder"