Windows 7 64bit - Kein Internetzugriff mancher Programme mehr

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014 02
Ran by Gabriele (administrator) on GABRIELE-PC on 29-09-2014 12:37:57
Running from C:\Users\Gabriele\Downloads
Loaded Profile: Gabriele (Available profiles: Gabriele & Maus & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Telefónica) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Megaify Software Co., Ltd.) C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\vVX1000.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Users\Gabriele\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ZTE) C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe
() C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\db_daemon.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Chip Digital GmbH) C:\Users\Gabriele\AppData\Local\Temp\DMR\dmr_72.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12632168 2011-07-21] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [BService64] => C:\Program Files (x86)\Bench\BService\1.1\bservice64.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\Run: [Spotify Web Helper] => C:\Users\Gabriele\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1193176 2012-07-14] ()
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {2a3c393b-cd35-11e1-be90-9c6668334a52} - G:\autorun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {53b457e1-cd38-11e1-907b-902b341865aa} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {53b458ab-cd38-11e1-907b-902b341865aa} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {5d493fdd-dfce-11e1-b93f-902b341865aa} - E:\windows\Install\Install.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {700f622d-2ea2-11e2-bd53-902b341865aa} - E:\AutoRun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {700f6239-2ea2-11e2-bd53-902b341865aa} - E:\AutoRun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {d85387f5-54ca-11e2-8393-902b341865aa} - E:\AutoRun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {eb39c025-dff7-11e1-814e-902b341865aa} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {f8d99125-d17b-11e1-904b-902b341865aa} - H:\LGAutoRun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {fa530b7e-d046-11e1-b7b8-902b341865aa} - H:\AutoRun.exe
HKU\S-1-5-21-2500248329-1858572524-4161465595-1000\...\MountPoints2: {fa530b8b-d046-11e1-b7b8-902b341865aa} - E:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk
ShortcutTarget: mcserver.lnk -> C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe (ZTE)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:49277;https=127.0.0.1:49277
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE966D07BEA73CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - {7D2CB01E-47A1-43F4-AA25-DE8E38FEB712} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: No Name -> {11111111-1111-1111-1111-110611341141} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\qyz07lqq.default-1411922951207
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Gabriele\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon [2013-01-02]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\om7d2h9z.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-06-17] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S2 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [621632 2011-03-04] ()
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [201080 2011-06-14] (Telefónica)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
S3 ASAPIW2K; C:\Windows\SysWOW64\Drivers\ASAPIW2K.sys [11264 2003-11-28] (Pinnacle Systems GmbH) [File not signed]
S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [File not signed]
R0 BMLoad; C:\Windows\SysWOW64\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [File not signed]
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-07-14] (DT Soft Ltd)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-28] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [50176 2008-01-18] (Microsoft Corporation) [File not signed]
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-03-14] (Realtek Semiconductor Corporation                           )
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
R1 tcpipBM; C:\Windows\System32\Drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [File not signed]
R1 tcpipBM; C:\Windows\SysWow64\Drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [File not signed]
S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (ZTE)
S3 zte_cdc_ecm; C:\Windows\System32\DRIVERS\zte_cdc_ecm.sys [58880 2011-08-10] (ZTE)
S3 zte_cpo; C:\Windows\System32\DRIVERS\zte_cpo.sys [14336 2011-08-10] (ZTE)
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 12:37 - 2014-09-29 12:38 - 00019100 _____ () C:\Users\Gabriele\Downloads\FRST.txt
2014-09-29 12:37 - 2014-09-29 12:37 - 00000000 ____D () C:\FRST
2014-09-29 12:36 - 2014-09-29 12:36 - 02108928 _____ (Farbar) C:\Users\Gabriele\Downloads\FRST64.exe
2014-09-29 12:35 - 2014-09-29 12:35 - 00000548 _____ () C:\Users\Gabriele\Downloads\defogger_disable.log
2014-09-29 12:35 - 2014-09-29 12:35 - 00000168 _____ () C:\Users\Gabriele\defogger_reenable
2014-09-29 12:34 - 2014-09-29 12:34 - 00050477 _____ () C:\Users\Gabriele\Downloads\Defogger.exe
2014-09-29 12:27 - 2014-09-29 12:27 - 00011984 _____ () C:\Users\Gabriele\Desktop\hijackthis.log
2014-09-29 12:26 - 2014-09-29 12:26 - 00388608 _____ (Trend Micro Inc.) C:\Users\Gabriele\Downloads\hijackthis.exe
2014-09-29 12:26 - 2014-09-29 12:26 - 00011984 _____ () C:\Users\Gabriele\Downloads\hijackthis.log
2014-09-29 12:25 - 2014-09-29 12:25 - 01101648 _____ () C:\Users\Gabriele\Downloads\HijackThis - CHIP-Installer.exe
2014-09-28 20:23 - 2014-09-28 20:23 - 00000000 ____D () C:\Program Files (x86)\FSGRW
2014-09-28 19:33 - 2014-09-28 19:33 - 00071067 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-28.txt
2014-09-28 18:55 - 2014-09-28 18:55 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-28 18:55 - 2014-09-28 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-28 18:49 - 2014-09-28 18:49 - 00000000 ____D () C:\Users\Gabriele\Desktop\Old Firefox Data
2014-09-28 18:40 - 2014-09-28 18:43 - 00000000 ____D () C:\AdwCleaner
2014-09-28 18:40 - 2014-09-28 18:40 - 01373475 _____ () C:\Users\Gabriele\Downloads\adwcleaner_3.310.exe
2014-09-28 18:39 - 2014-09-28 18:39 - 02953520 _____ (AVAST Software) C:\Users\Gabriele\Downloads\avast-browser-cleanup_9.0.0.224.exe
2014-09-28 12:41 - 2014-09-28 12:41 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-28 12:41 - 2014-09-28 12:41 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-28 12:40 - 2014-09-28 12:40 - 00244136 _____ () C:\Users\Gabriele\Downloads\Firefox Setup Stub 32.0.3.exe
2014-09-28 12:39 - 2014-09-28 12:39 - 00773184 _____ ( ) C:\Users\Gabriele\Downloads\FirefoxSetup.exe
2014-09-28 11:35 - 2014-09-28 11:45 - 00000000 ____D () C:\Users\Gabriele\Desktop\Alte Firefox-Daten
2014-09-28 00:17 - 2014-09-28 00:17 - 00001118 _____ () C:\Users\Public\Desktop\Debut Videorekorder.lnk
2014-09-28 00:17 - 2014-09-28 00:17 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Videoverwandte Programme
2014-09-27 21:13 - 2014-09-28 12:42 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-27 21:13 - 2014-09-27 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-27 21:13 - 2014-09-27 21:13 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-27 21:13 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-27 21:13 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-27 21:13 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-27 21:12 - 2014-09-27 21:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Gabriele\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-09-27 21:08 - 2014-09-27 21:08 - 00000000 ____D () C:\Users\Gabriele\AppData\Local\com
2014-09-27 21:06 - 2014-09-27 21:06 - 01386464 _____ () C:\Users\Gabriele\Downloads\Player_Setup.exe
2014-09-27 14:30 - 2014-09-28 11:43 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-09-27 14:30 - 2014-09-28 00:17 - 00001130 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Videorekorder.lnk
2014-09-27 14:30 - 2014-09-27 14:30 - 01582616 _____ (NCH Software) C:\Users\Gabriele\Downloads\debutsetup.exe
2014-09-27 14:30 - 2014-09-27 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Videoverwandte Programme
2014-09-27 14:23 - 2014-09-27 14:25 - 00000000 ____D () C:\Users\Gabriele\Documents\Video Download Capture
2014-09-27 14:18 - 2014-09-27 14:18 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Apowersoft
2014-09-27 14:18 - 2014-04-09 21:05 - 00031920 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2014-09-27 14:14 - 2014-09-27 14:15 - 23796776 _____ (APOWERSOFT LIMITED ) C:\Users\Gabriele\Downloads\video-download-capture.exe
2014-09-27 14:07 - 2014-09-27 14:07 - 00000013 _____ () C:\Users\Gabriele\Documents\hds.fra.rtl2now.de8449398.flv
2014-09-27 14:04 - 2014-09-27 14:04 - 00000013 _____ () C:\Users\Gabriele\Documents\hds.fra.rtl2now.de8223931.flv
2014-09-27 14:02 - 2014-09-27 14:02 - 00000013 _____ () C:\Users\Gabriele\Documents\hds.fra.rtl2now.de8137100.flv
2014-09-27 14:01 - 2014-09-27 14:01 - 00000013 _____ () C:\Users\Gabriele\Documents\hds.fra.rtl2now.de8089081.flv
2014-09-27 13:56 - 2014-09-29 11:52 - 00001348 _____ () C:\Windows\Tasks\ZAISG.job
2014-09-27 13:56 - 2014-09-27 13:56 - 01506200 _____ (CinPlV27.09) C:\Users\Gabriele\AppData\Roaming\ZAISG.exe
2014-09-27 13:56 - 2014-09-27 13:56 - 00004386 _____ () C:\Windows\System32\Tasks\ZAISG
2014-09-27 13:53 - 2014-09-27 13:53 - 17805707 _____ () C:\Users\Gabriele\Downloads\streamtransport_1.1.6.2.zip
2014-09-27 13:53 - 2014-09-27 13:53 - 00000000 ____D () C:\Users\Gabriele\Downloads\streamtransport_1.1.6.2
2014-09-27 13:53 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-09-27 13:53 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-09-27 13:52 - 2014-09-27 13:52 - 01101648 _____ () C:\Users\Gabriele\Downloads\StreamTransport - CHIP-Installer.exe
2014-09-27 01:38 - 2014-09-27 01:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UKBB - Boryspil International FSX
2014-09-26 16:45 - 2014-09-26 16:49 - 375951072 _____ (InterSkyStudio ) C:\Users\Gabriele\Downloads\UKBB_Intl_FSX_v100.exe
2014-09-24 23:32 - 2014-09-28 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-23 18:42 - 2014-09-23 18:42 - 00010513 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-23(1).txt
2014-09-23 18:41 - 2014-09-23 18:41 - 00037376 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-23.txt
2014-09-22 16:27 - 2014-09-22 16:27 - 00001186 _____ () C:\Users\Gabriele\Desktop\Theme Park World.lnk
2014-09-22 14:55 - 2014-09-22 14:53 - 02242978 _____ () C:\Users\Gabriele\Desktop\video-2014-09-22-14-52-37.mp4
2014-09-20 23:37 - 2014-09-20 23:37 - 00001392 _____ () C:\Users\Gabriele\Downloads\Urban Chaos MF.dlc
2014-09-20 18:36 - 2014-09-20 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bullfrog
2014-09-20 18:36 - 2014-09-20 18:36 - 00000000 ____D () C:\Program Files (x86)\Bullfrog
2014-09-20 18:33 - 2011-03-14 15:33 - 00000000 ____D () C:\Users\Gabriele\Downloads\Themek.World.MULTi5-CLASSiO
2014-09-20 16:45 - 2014-09-20 17:23 - 517619355 _____ () C:\Users\Gabriele\Downloads\Themek.World.MULTi5-CLASSiO.rar
2014-09-19 22:05 - 2014-09-19 22:07 - 00000000 ____D () C:\Users\Gabriele\Documents\WhatsApp
2014-09-15 17:40 - 2014-09-15 17:40 - 00064482 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-15.txt
2014-09-15 15:35 - 2014-09-15 15:35 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\IVAO
2014-09-15 15:34 - 2014-09-15 15:34 - 39770178 _____ () C:\Users\Gabriele\Downloads\ivap-v2.0.2-b2773.zip
2014-09-14 22:40 - 2014-09-14 22:41 - 00000000 ____D () C:\Users\Gabriele\Downloads\sd_cap10fsx
2014-09-14 22:39 - 2014-09-14 22:39 - 00000000 ____D () C:\Users\Gabriele\Downloads\fokker_spider
2014-09-14 22:37 - 2014-09-14 22:37 - 19549299 _____ () C:\Users\Gabriele\Downloads\sd_cap10fsx.zip
2014-09-14 22:32 - 2014-09-14 22:32 - 01188619 _____ () C:\Users\Gabriele\Downloads\fokker_spider.zip
2014-09-14 22:09 - 2014-09-14 22:10 - 00000000 ____D () C:\Users\Gabriele\Downloads\atos_vr
2014-09-14 22:02 - 2014-09-14 22:02 - 07449080 _____ () C:\Users\Gabriele\Downloads\atos_vr.zip
2014-09-14 21:40 - 2014-09-14 21:41 - 11047403 _____ () C:\Users\Gabriele\Downloads\synchro-soft_c172_vintage_soundset_demo.zip
2014-09-14 21:39 - 2014-09-14 21:40 - 17195241 _____ () C:\Users\Gabriele\Downloads\sound_b_737-800(1).zip
2014-09-13 23:30 - 2014-09-13 23:30 - 00003930 _____ () C:\Users\Gabriele\Downloads\EDAB_AFIS.txt
2014-09-11 20:17 - 2014-09-11 20:17 - 00048184 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-11.txt
2014-09-11 03:11 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 03:11 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 03:11 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 03:11 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 03:11 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 03:11 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 03:11 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 03:11 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 03:11 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 03:11 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 03:11 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 03:11 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 03:11 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 03:11 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 03:11 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 03:11 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 03:11 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 03:11 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 03:11 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 03:11 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 03:11 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 03:11 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 03:11 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 03:11 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 03:11 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 03:11 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 03:11 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 03:11 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 03:11 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 03:11 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 03:11 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 03:11 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 03:11 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 03:11 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 03:11 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 03:11 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 03:11 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 03:11 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 03:11 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 03:11 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 03:11 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 03:11 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 03:11 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 03:11 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 03:11 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 03:11 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 03:11 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 03:11 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 03:10 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 03:10 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 03:10 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 03:10 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 03:10 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 03:10 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 03:10 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 03:10 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 19:02 - 2014-09-10 19:02 - 00000000 ____D () C:\Users\Gabriele\Downloads\fsx_urss
2014-09-10 18:59 - 2014-09-10 18:59 - 00655007 _____ () C:\Users\Gabriele\Downloads\fsx_urss.zip
2014-09-10 16:27 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 16:27 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 16:27 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 16:27 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 16:27 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-09 23:37 - 2014-09-09 23:37 - 00805744 _____ () C:\Users\Gabriele\Downloads\vnkt_scenery_full_update.zip
2014-09-09 23:36 - 2014-09-09 23:36 - 01928277 _____ () C:\Users\Gabriele\Downloads\vnkt_scenery_update_3.zip
2014-09-09 23:34 - 2014-09-09 23:34 - 00000000 ____D () C:\Users\Gabriele\Downloads\vnkt_fix_2
2014-09-09 23:33 - 2014-09-09 23:33 - 00461382 _____ () C:\Users\Gabriele\Downloads\vnkt_fix_2.zip
2014-09-09 23:32 - 2014-09-09 23:32 - 00000000 ____D () C:\Users\Gabriele\Downloads\vnkt_update
2014-09-09 23:31 - 2014-09-09 23:31 - 01853163 _____ () C:\Users\Gabriele\Downloads\vnkt_update.zip
2014-09-09 23:29 - 2014-09-09 23:30 - 00000000 ____D () C:\Users\Gabriele\Downloads\vnkt_scenery
2014-09-09 23:25 - 2014-09-09 23:26 - 12297192 _____ () C:\Users\Gabriele\Downloads\vnkt_scenery.zip
2014-09-09 17:38 - 2014-09-09 17:38 - 00000000 ____D () C:\Users\Gabriele\Downloads\wsss_ade_jv
2014-09-09 12:03 - 2014-09-09 12:04 - 00000000 ____D () C:\Flight One Software
2014-09-09 11:33 - 2014-09-09 11:48 - 00000000 ____D () C:\Level D 767
2014-09-09 11:30 - 2014-09-09 11:30 - 00002048 _____ () C:\Users\Gabriele\Downloads\ld767fsx.lic
2014-09-09 01:57 - 2014-09-09 01:57 - 00594863 _____ () C:\Users\Gabriele\Downloads\wsss_ade_jv.zip
2014-09-09 01:54 - 2014-09-09 01:55 - 109278398 _____ () C:\Users\Gabriele\Downloads\imaginesim_WSSS_demo_191010a.zip
2014-09-08 14:05 - 2014-09-08 14:05 - 00000000 ____D () C:\Users\Gabriele\Downloads\fsx_ypph_aussiefs_v1
2014-09-08 14:02 - 2014-09-08 14:02 - 00304589 _____ () C:\Users\Gabriele\Downloads\fsx_ypph_aussiefs_v1.zip
2014-09-08 11:40 - 2014-09-08 11:41 - 64919508 _____ () C:\Users\Gabriele\Downloads\Setup_Zusi3_Demo_2014-09-02.zip
2014-09-06 23:04 - 2014-09-06 23:04 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Real VCBI™ X
2014-09-06 23:02 - 2014-09-06 23:02 - 00000000 ____D () C:\Users\Gabriele\Downloads\the_real_vcbi_x
2014-09-06 22:36 - 2014-09-06 22:37 - 23752728 _____ () C:\Users\Gabriele\Downloads\the_real_vcbi_x.zip
2014-09-06 22:28 - 2012-05-12 09:56 - 00000000 ____D () C:\Users\Gabriele\Downloads\bali
2014-09-06 19:01 - 2014-09-06 19:02 - 21111549 _____ () C:\Users\Gabriele\Downloads\bali_FSX.7z
2014-09-06 16:50 - 2014-09-06 16:50 - 00000000 ____D () C:\Users\Gabriele\Downloads\dubai_x2
2014-09-06 16:50 - 2014-09-06 16:50 - 00000000 ____D () C:\Users\Gabriele\Downloads\dubai_x1
2014-09-05 21:17 - 2014-09-05 21:17 - 00057059 _____ () C:\Users\Gabriele\Downloads\Private-Nachrichten-Gordian Tschöpe-2014-09-05.txt
2014-09-05 17:37 - 2014-09-05 17:48 - 34252756 _____ () C:\Users\Gabriele\Downloads\dubai_x2.zip
2014-09-05 17:28 - 2014-09-05 17:55 - 82285177 _____ () C:\Users\Gabriele\Downloads\dubai_x1.zip
2014-09-03 22:38 - 2014-09-03 22:38 - 00591759 _____ () C:\Users\Gabriele\Downloads\Log_Vorlagen_S2_S3_C1(2).zip
2014-09-03 22:38 - 2014-09-03 22:38 - 00358005 _____ () C:\Users\Gabriele\Downloads\Log_Vorlagen_S2_S3(3).zip
2014-09-03 12:35 - 2014-09-19 22:02 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-03 12:35 - 2014-09-03 12:35 - 00000000 ____D () C:\ProgramData\McAfee
2014-09-03 08:07 - 2014-09-03 08:07 - 00566509 _____ () C:\Users\Gabriele\Downloads\image(2).jpeg
2014-09-03 08:07 - 2014-09-03 08:07 - 00498534 _____ () C:\Users\Gabriele\Downloads\image(3).jpeg
2014-09-02 21:55 - 2014-09-02 21:55 - 00487483 ____N () C:\monitor.exe
2014-09-02 20:16 - 2014-09-02 20:16 - 00634880 _____ () C:\DirectControl.exe
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Gabriele\AppData\Roaming\ZAISG
2014-08-30 12:24 - 2014-08-30 12:25 - 00291152 _____ () C:\Windows\Minidump\083014-60356-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 12:35 - 2012-07-13 23:52 - 00000000 ____D () C:\Users\Gabriele
2014-09-29 12:24 - 2012-08-06 18:12 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\TS3Client
2014-09-29 11:53 - 2013-06-04 21:28 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-29 11:52 - 2012-07-13 23:55 - 01140216 _____ () C:\Windows\WindowsUpdate.log
2014-09-29 10:46 - 2012-07-14 11:39 - 00000000 ____D () C:\Users\Gabriele\Documents\EuroScope
2014-09-29 10:46 - 2009-07-14 06:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-29 10:46 - 2009-07-14 06:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-29 10:43 - 2013-10-05 20:04 - 00096300 _____ () C:\Windows\setupact.log
2014-09-29 10:39 - 2014-06-05 15:32 - 00000364 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-09-29 10:37 - 2012-12-20 01:53 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-29 10:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-29 01:08 - 2014-06-05 15:32 - 00002732 _____ () C:\Windows\System32\Tasks\DriverToolkit Autorun
2014-09-28 23:10 - 2012-11-13 17:11 - 00000000 ____D () C:\Program Files (x86)\FSrealWX
2014-09-28 23:10 - 2012-07-14 01:48 - 00000000 ____D () C:\Users\Gabriele\Documents\Flight Simulator X-Dateien
2014-09-28 19:14 - 2012-08-06 17:38 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Skype
2014-09-28 18:55 - 2012-08-06 17:38 - 00000000 ____D () C:\ProgramData\Skype
2014-09-28 18:44 - 2010-11-21 05:47 - 00542608 _____ () C:\Windows\PFRO.log
2014-09-28 18:33 - 2014-06-04 18:15 - 00003494 _____ () C:\Windows\System32\Tasks\GPUpdateCheck
2014-09-27 14:17 - 2014-07-08 08:45 - 00001425 _____ () C:\Users\Gabriele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-27 13:55 - 2013-12-31 15:01 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-26 17:04 - 2014-06-02 08:26 - 00000000 ____D () C:\Users\Gabriele\Documents\vPilot Files
2014-09-25 10:45 - 2013-04-19 02:51 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Nitro PDF
2014-09-24 12:53 - 2013-06-04 21:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-24 12:53 - 2012-07-14 00:33 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-24 12:53 - 2012-07-14 00:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-22 08:42 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-21 12:00 - 2013-06-14 17:25 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\UseNeXT
2014-09-21 11:59 - 2013-06-14 17:25 - 00000000 ____D () C:\Users\Gabriele\Documents\UseNeXT
2014-09-20 18:39 - 2013-01-02 14:42 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-09-19 22:16 - 2013-04-22 00:19 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\vlc
2014-09-16 11:06 - 2012-07-13 23:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-16 10:56 - 2012-12-22 22:16 - 00000000 ____D () C:\Program Files (x86)\Loksim3D
2014-09-15 17:38 - 2014-08-19 20:51 - 00000000 ____D () C:\Users\Gabriele\Desktop\Leitender Mentor
2014-09-15 15:35 - 2013-08-01 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVAO
2014-09-15 15:35 - 2013-08-01 21:54 - 00000000 ____D () C:\Program Files (x86)\IVAO
2014-09-15 10:41 - 2014-05-15 10:41 - 00000000 ____D () C:\Users\Gabriele\Documents\Plan-G Files
2014-09-14 17:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-11 21:03 - 2014-01-31 18:43 - 00000000 ____D () C:\Users\Gabriele\Documents\VATSIM
2014-09-11 18:51 - 2014-03-19 19:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-11 18:51 - 2013-08-24 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-11 18:51 - 2013-08-24 09:44 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-09-11 03:10 - 2013-08-19 10:35 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 03:10 - 2012-07-14 00:10 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-11 03:10 - 2012-07-14 00:10 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-09-11 03:10 - 2012-07-14 00:09 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-11 03:10 - 2012-07-14 00:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-11 03:00 - 2012-05-09 12:45 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 11:23 - 2014-06-20 20:38 - 00001887 _____ () C:\Users\Gabriele\Desktop\vPilot.lnk
2014-09-09 12:04 - 2012-10-15 19:00 - 00000000 ____D () C:\Users\Gabriele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight One Software
2014-09-03 17:24 - 2013-04-02 20:56 - 00000000 ____D () C:\Program Files (x86)\Nitro
2014-09-03 12:46 - 2014-01-31 18:49 - 00000000 ____D () C:\Users\Gabriele\Documents\Lustige Texte
2014-09-03 12:36 - 2012-07-14 12:02 - 00000000 ____D () C:\Users\Gabriele\AppData\Local\Adobe
2014-09-03 12:34 - 2012-07-14 11:57 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-03 12:34 - 2012-07-14 11:57 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-09-02 22:11 - 2014-04-29 23:01 - 00000000 ____D () C:\Users\Gabriele\Documents\Rechnungen
2014-08-30 12:24 - 2012-09-11 03:03 - 563841645 _____ () C:\Windows\MEMORY.DMP
2014-08-30 12:24 - 2012-09-11 03:03 - 00000000 ____D () C:\Windows\Minidump

Files to move or delete:
====================
C:\Users\Gabriele\20110303.dat
C:\Users\Gabriele\CMDLGD2.dll
C:\Users\Gabriele\config1.vbs
C:\Users\Gabriele\config2.vbs
C:\Users\Gabriele\config3.vbs
C:\Users\Gabriele\config4.vbs
C:\Users\Gabriele\convlist.exe
C:\Users\Gabriele\EdIgIni.exe
C:\Users\Gabriele\filtoff.bat
C:\Users\Gabriele\flexfunc.dll
C:\Users\Gabriele\InetTime.exe
C:\Users\Gabriele\logconv.exe
C:\Users\Gabriele\mjc8q400.exe
C:\Users\Gabriele\MoveAlarm.exe
C:\Users\Gabriele\restart32.exe
C:\Users\Gabriele\SAGrab.exe
C:\Users\Gabriele\schedit32.exe
C:\Users\Gabriele\ServerListDownload.exe
C:\Users\Gabriele\TimeServer.exe
C:\Users\Gabriele\ui32reg.bat
C:\Users\Gabriele\ui32tips.dll
C:\Users\Gabriele\uicaptioner.exe
C:\Users\Gabriele\UIFilt32.dll
C:\Users\Gabriele\uihist.exe
C:\Users\Gabriele\uinws.exe
C:\Users\Gabriele\uinwsshp.dll
C:\Users\Gabriele\Uiview32.exe
C:\Users\Gabriele\unins000.dat
C:\Users\Gabriele\unins000.exe
C:\Windows\Tasks\{A51A305B-0D75-49E8-94F1-F0B94CDD52C8}.job


Some content of TEMP:
====================
C:\Users\Gabriele\AppData\Local\Temp\0o1phyj2.zfa.exe
C:\Users\Gabriele\AppData\Local\Temp\avgnt.exe
C:\Users\Gabriele\AppData\Local\Temp\BackupSetup.exe
C:\Users\Gabriele\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Gabriele\AppData\Local\Temp\drm_dyndata_7370007.dll
C:\Users\Gabriele\AppData\Local\Temp\drm_dyndata_7390006.dll
C:\Users\Gabriele\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkkni0p.dll
C:\Users\Gabriele\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmppt_x4t.dll
C:\Users\Gabriele\AppData\Local\Temp\exthelper.exe
C:\Users\Gabriele\AppData\Local\Temp\fileutil.dll
C:\Users\Gabriele\AppData\Local\Temp\GPUpd.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53996D210.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5399DEB70.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539A94F30.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539B1D230.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539B56950.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539C4EA10.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539CC0280.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539DA09A0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539E85070.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539E915C0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539ED8280.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539F29CF0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd539FD5CF0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53A06E3B0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53DD581C0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53DDF9BB0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53DEA2580.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53DFBB200.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53E11B030.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53E273350.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EA500E0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EBA3D40.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53ECF3CE0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EDC95E0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EDD3090.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EE25290.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53EF322A0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F08A1F0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F189DA0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F196210.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F220D30.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F313BA0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F371840.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F456C50.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F4C5080.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd53F5B2830.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd540083350.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5400C7EB0.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5401A5620.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5401A7C00.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5401EB330.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd541A662D1.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5423C3461.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd54246BD01.exe
C:\Users\Gabriele\AppData\Local\Temp\GPUpd5426A9C91.exe
C:\Users\Gabriele\AppData\Local\Temp\ICReinstall_stinger64_CB-DL-Manager.exe
C:\Users\Gabriele\AppData\Local\Temp\jOjN2.dll
C:\Users\Gabriele\AppData\Local\Temp\jOjN2.exe
C:\Users\Gabriele\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Gabriele\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Gabriele\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Gabriele\AppData\Local\Temp\jzeaig3l.ayx.exe
C:\Users\Gabriele\AppData\Local\Temp\mpsetup.exe
C:\Users\Gabriele\AppData\Local\Temp\nsd1182.exe
C:\Users\Gabriele\AppData\Local\Temp\nsn4F50.exe
C:\Users\Gabriele\AppData\Local\Temp\nst4B2B.exe
C:\Users\Gabriele\AppData\Local\Temp\nsyD6C.exe
C:\Users\Gabriele\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Gabriele\AppData\Local\Temp\nvStInst.exe
C:\Users\Gabriele\AppData\Local\Temp\ose00000.exe
C:\Users\Gabriele\AppData\Local\Temp\Quarantine.exe
C:\Users\Gabriele\AppData\Local\Temp\removedirectory.exe
C:\Users\Gabriele\AppData\Local\Temp\setup.exe
C:\Users\Gabriele\AppData\Local\Temp\SHSetup.exe
C:\Users\Gabriele\AppData\Local\Temp\smt_istartsurf.exe
C:\Users\Gabriele\AppData\Local\Temp\StopService.exe
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite11179.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite25149.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite36417.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite43095.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite66576.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite74871.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite78398.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite78673.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite90935.dll
C:\Users\Gabriele\AppData\Local\Temp\System.Data.SQLite91549.dll
C:\Users\Gabriele\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Gabriele\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Gabriele\AppData\Local\Temp\vPilot-Setup-1.1.5365.23193.exe
C:\Users\Gabriele\AppData\Local\Temp\xJdp8.exe
C:\Users\Gabriele\AppData\Local\Temp\yux4oo2r.x1w.exe
C:\Users\Gabriele\AppData\Local\Temp\_is1313.exe
C:\Users\Gabriele\AppData\Local\Temp\_is7712.exe
C:\Users\Gabriele\AppData\Local\Temp\_isD642.exe
C:\Users\Maus\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-26 13:40

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-09-2014 02
Ran by Gabriele at 2014-09-29 12:38:35
Running from C:\Users\Gabriele\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4Musics MP3 to OGG Converter 4.2 (HKLM-x32\...\4Musics MP3 to OGG Converter 4.2_is1) (Version:  - NeSoft)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acoustica MP3 To Wave Converter PLUS (HKLM-x32\...\Acoustica MP3 To Wave Converter PLUS) (Version: 2.5 - Acoustica, Inc.)
Active Sky X (HKLM-x32\...\{A06A6679-41D7-48C5-82F8-7D3B0B654720}) (Version: 1.00.1056 - HiFi Flightware)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Aerosoft - Iceland X (HKLM-x32\...\{E5390E6D-3012-42EF-9F19-156B1B362372}_is1) (Version: 1 - Aerosoft - Iceland X)
Aerosoft Mega Airport Paris Orly for FSX  (HKCU\...\Aerosoft Mega Airport Paris Orly for FSX ) (Version:  - )
Aerosoft Weeze X v1.00 (HKLM-x32\...\Aerosoft Weeze X v1.00) (Version:  - )
Aerosoft's - Airbus X Extended - FSX (HKLM-x32\...\Airbus X Extended - FSX) (Version:  - )
aerosoft's - Approaching Innsbruck X (HKLM-x32\...\{70864384-DD19-44CB-A999-A917F32F623D}) (Version: 1.10 - aerosoft)
Aerosoft's - Corfu X (HKLM-x32\...\{8A073262-FB25-4224-AE36-C2725A616E05}) (Version: 1.10 - Aerosoft)
Aerosoft's - Erfurt X (HKLM-x32\...\{8D0E7A20-7D95-427F-BDB2-218CA6E0E7A5}) (Version: 1.00 - Aerosoft)
Aerosoft's - F-16 Fighting Falcon (HKLM-x32\...\{A663BED9-978C-4A04-82A3-3029245055BE}) (Version: 1.00 - Aerosoft)
aerosoft's - FlightSim Commander 9 (HKLM-x32\...\{F941AABE-E868-42D9-9F38-884250F7898A}) (Version: 9.00 - aerosoft)
Aerosoft's - FlorenceX (HKLM-x32\...\{E764BA22-C1F3-4770-94E3-FB4948786248}) (Version: 1.04 - Aerosoft)
Aerosoft's - Frankfurt-Hahn X (HKLM-x32\...\{B0E7EC1F-53EC-4CD4-81B6-0AA25C8C5A9A}) (Version: 1.02 - Aerosoft)
Aerosoft's - German Airports 1 - Friedrichshafen X (HKLM-x32\...\{411B6A8F-0088-496D-8A0A-1319BB825D7C}) (Version: 1.00 - Aerosoft)
aerosoft's - German Airports 1 - Stuttgart X (HKLM-x32\...\{E4298CF5-9C36-4519-9089-FF7A43EA5C5D}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2 - Dortmund X (HKLM-x32\...\{A298A7A7-3BD2-42EE-B48C-12C97A9BBF08}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Cologne-Bonn X (HKLM-x32\...\{31AECBEB-BE18-4342-B8AA-DD18F2BAC5B5}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Hannover X (HKLM-x32\...\{AF209F10-BD3A-4AA7-A485-845508D6C672}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Leipzig X (HKLM-x32\...\{26B7F336-1369-49D6-8E4C-DC2C7BD65647}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Muenster-Osnabrueck X (HKLM-x32\...\{A80712C1-A6E6-423E-A3E2-5C75408EF149}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Berlin-Tegel X (HKLM-x32\...\{3DAD565E-1275-4EE8-9568-932CB7B75FB8}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Bremen X (HKLM-x32\...\{C1F98ADD-81BF-45E1-A36B-515CA20B61AF}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Hamburg X (HKLM-x32\...\{EA6E7823-9E5B-4EDD-9750-C3C87FDF0460}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Luebeck X (HKLM-x32\...\{FCAC5DCE-DECB-4AA4-AA64-13827EA81B2A}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Paderborn-Lippstadt X (HKLM-x32\...\{41583634-4D73-4826-8983-3A2CDA08A7CC}) (Version: 1.10 - aerosoft)
Aerosoft's - Keflavik X (HKLM-x32\...\{0F6047EC-36A9-4735-840F-2BAA134D4B94}) (Version: 1.00 - Aerosoft)
aerosoft's - Madeira X (HKLM-x32\...\{17440258-DB48-49DE-8391-79900477490C}) (Version: 1.00 - aerosoft)
aerosoft's - Mallorca X for FSX (HKLM-x32\...\{07CC448E-4FFC-444F-999D-10F11AE559FB}) (Version: 1.00 - aerosoft)
aerosoft's - Mega Airport Amsterdam FSX (HKLM-x32\...\{0A297C87-BF52-43FD-AD75-EE72228E4457}) (Version: 1.04 - aerosoft)
Aerosoft's - Mega Airport Berlin Brandenburg - FSX (HKLM-x32\...\Mega Airport Berlin Brandenburg - FSX) (Version: 1.00 - Aerosoft)
Aerosoft's - Mega Airport Brussels X (HKLM-x32\...\{CB858C75-8537-4B71-9080-2A4F7D51F128}) (Version: 1.00 - Aerosoft)
Aerosoft's - Mega Airport Budapest (HKLM-x32\...\{AD6C554F-5050-40B1-B84D-51D74A09C7E4}) (Version: 2.00 - Aerosoft)
Aerosoft's - Mega Airport Dublin - FSX (HKLM-x32\...\Mega Airport Dublin - FSX) (Version: 1.10 - Aerosoft)
Aerosoft's - Mega Airport Duesseldorf - FSX (HKLM-x32\...\Mega Airport Duesseldorf - FSX) (Version:  - )
aerosoft's - Mega Airport Frankfurt X (HKLM-x32\...\{BAEE0C24-C8C2-4820-9DF4-887909F1A286}) (Version: 1.04 - aerosoft)
aerosoft's - Mega Airport Munich X (HKLM-x32\...\{1B19DA07-6870-4E60-9171-5C53AD21A0E0}) (Version: 1.01 - aerosoft)
aerosoft's - Mega Airport Stockholm Arlanda X (HKLM-x32\...\{3B6F6E35-900C-4FE3-B2F6-067443353CD1}) (Version: 1.00 - aerosoft)
Aerosoft's - Mega Airport Zurich 2012 - FSX (HKLM-x32\...\{463A571A-B793-459B-BEA8-028DC323AAB0}) (Version: 1.00 - Aerosoft)
Aerosoft's - Saarbruecken X (HKLM-x32\...\{DDF29272-E85B-4AED-B3CC-2EC924CD2120}) (Version: 1.00 - Aerosoft)
Aerosoft's - Sharm El-Sheikh 2012 - FSX (HKLM-x32\...\{2C36035A-65D8-4711-A2CB-ED18A725EBDF}) (Version: 1.00 - Aerosoft)
Aerosoft's - Skiathos X - FSX (HKLM-x32\...\Skiathos X - FSX) (Version: 1.00 - )
aerosoft's - Venice X (HKLM-x32\...\{74F493A2-1264-4BF2-A135-0184C68BD580}) (Version: 1.00 - aerosoft)
Aerosoft's - VFR Germany 1 (HKLM-x32\...\{7E34E4DF-26FA-46D0-BC0F-77CE6CF4CBC5}) (Version: 1.00 - Aerosoft)
Aerosoft's - VFR Germany 4 (HKLM-x32\...\{F7016342-C196-44B1-AAC5-D7BA4708473E}) (Version: 1.00 - Aerosoft)
Airport-Tower-Simulator 2012 Version 1.0 (HKLM-x32\...\{A89FDE8E-91B5-4A09-AB00-5F4B5207B6D9}_is1) (Version: 1.0 - Space Dream Studios - Stephan Guenther)
Alan Wake (HKLM-x32\...\Alan Wake_is1) (Version:  - )
ALDI Bestellsoftware 4.14.1 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.14.1 - ORWO Net)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version:  - Amazon)
Any Audio Converter 4.0.1 (HKLM-x32\...\Any Audio Converter_is1) (Version:  - Any-Audio-Converter.com)
ASAPI (HKLM-x32\...\{8A7E941F-2BB4-47D0-B732-8AE5F3513B68}) (Version: 6.0.0 - Pinnacle Systems GmbH)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Audio Recorder for Free v12.9.5 (HKLM-x32\...\Audio Recorder for Free_is1) (Version:  - Copyright(C) 2006-2012 AudioToolMedia Software.)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.5.4.0 - Auslogics Labs Pty Ltd)
Auto Gordian Knot 2.55 (HKLM-x32\...\AutoGK) (Version: 2.55 - len0x)
AutoHotkey 1.1.13.01 (HKLM\...\AutoHotkey) (Version: 1.1.13.01 - Lexikos)
Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVS Audio Editor 7.2 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.2.488 - Online Media Technologies Ltd.)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Braid (HKLM-x32\...\Braid) (Version: 1.1.0.0 - MumboJumbo)
Brandenburg Airfields V1.0 (HKCU\...\Brandenburg Airfields V1.0) (Version:  - )
BVE 4 (HKLM-x32\...\{E52382DC-2E7A-439D-8ECE-A27D8B816645}) (Version: 2.1.0 - mackoy)
BVE Uchibo Line (HKLM-x32\...\{9BD8D527-A96C-46DB-B076-48D34189B372}) (Version: 2.0.1 - mackoy)
C337H SKYMASTER HD SERIES FSX (HKLM-x32\...\C337H SKYMASTER HD SERIES FSX) (Version: 1.00.00.00 - Carenado)
Carenado C340 II FSX (HKLM-x32\...\Carenado C340 II FSX) (Version: 1.00.00.00 - Carenado)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Complete Dublin 2008 Scenery (Deafult AI) (HKCU\...\Complete Dublin 2008 Scenery (Deafult AI)) (Version:  - )
ConcordeX for FSX v1.2 (HKLM-x32\...\ConcordeX for FSX_is1) (Version: 1.1.2.0 - FlightSimLabs, Ltd.)
CR-Software's - German Landmarks FSX (HKLM-x32\...\{53E5E2ED-1603-4531-B602-42526F2BB973}) (Version: 2.0 - CR-Software)
CS - 707 CPTN (HKLM-x32\...\{7D37AF13-B47D-4479-BA59-F29F21A9FFE4}) (Version: 1.2 - The Silverwingz)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Debut Videorekorder (HKLM-x32\...\Debut) (Version: 1.95 - NCH Software)
DriverToolkit version 8.3.0.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.3.0.0 - Megaify Software)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version:  - )
EchoLink (HKLM-x32\...\{DC33421C-0E1C-470A-BE37-7B7C82677812}) (Version: 2.0.908 - Synergenics, LLC)
EDGP OPPENHEIM-X V.1.1 (HKCU\...\EDGP OPPENHEIM-X V.1.1) (Version:  - )
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.7.1.8142 - Steinberg Media Technologies GmbH)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.118 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.118 - Etron Technology) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.2 - SCS Software)
EuroScope 3.1d (HKLM-x32\...\{93878DDD-E621-4AFF-8203-2658451A3636}) (Version: 3.1.4 - Gergely Csernak)
EuroScope v3.2 (HKLM-x32\...\{643D8CF6-F80A-4686-90A2-ECC4B0D63089}) (Version: 3.2 - Gergely Csernak)
Flying Haggis 1.0.1 (HKLM-x32\...\db-audioware-Flying Haggis-1.0.1) (Version:  - )
FMS32-PRO - Demoversion (HKLM-x32\...\ST6UNST #1) (Version:  - )
FMS32-PRO Version 3.1.5 (HKLM-x32\...\ST6UNST #2) (Version:  - )
Free FLV Converter V 7.6.0 (HKLM-x32\...\Free FLV Converter_is1) (Version: 7.6.0.0 - Koyote Soft)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Free Video Dub version (HKLM-x32\...\Free Video Dub_is1) (Version:  - DVDVideoSoft Ltd.)
Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version:  - Jodix Technologies Ltd.)
Free YouTube to MP3 Converter version 3.11.26.706 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.26.706 - DVDVideoSoft Ltd.)
FS2Crew: Emergency NGX! (HKLM-x32\...\FS2Crew: Emergency NGX!) (Version:  - )
FS2Crew: iFly737NG Button Control Edition (HKLM-x32\...\FS2Crew: iFly737NG Button Control Edition) (Version:  - )
FS2Crew: PMDG 737 NGX Edition (HKLM-x32\...\FS2Crew: PMDG 737 NGX Edition) (Version:  - )
FSFDT FSCopilot (HKLM-x32\...\FSFDT FSCopilot) (Version:  - )
FSrealWX lite version 1.06.1465 (HKLM-x32\...\FSrealWX lite_is1) (Version: 1.06.1465 - Hanse-Coders.)
G4FON Koch Method Morse Trainer (HKLM-x32\...\G4FON Koch Method Morse Trainer) (Version:  - )
GameShadow (HKLM-x32\...\{D98C9637-93DA-44DB-B73A-B11A1192AB26}) (Version: 1.91.0000 - Aardwork Software Ltd)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
German Landmarks FSX (x32 Version: 2.0 - CR-Software) Hidden
GIGA F-Tasten v6.0 (HKLM-x32\...\GIGA F-Tasten_is1) (Version:  - )
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Gordi Mathe Macht Spaß1 (HKLM-x32\...\Gordi Mathe Macht Spaß1) (Version:  - )
Grand Theft Auto Vice City (HKLM-x32\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
Half-Life: Counter-Strike (HKLM-x32\...\Half-Life: Counter-Strike) (Version:  - )
HAM-LOG for Windows 3.41 (HKLM-x32\...\HAM-LOG for Windows 3.41) (Version: 3.41 - Arthur Schwarz, DJ6LS)
HUAWEI DataCard Driver 4.20.12.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.20.12.00 - Huawei technologies Co., Ltd.)
Hugo Retro Mania (HKLM-x32\...\{31902FF5-6B59-4768-BB7A-7F38B149A04F}) (Version: 1.0.0 - Krea Medie)
iFly Jets - The 737NG for FSX (HKLM-x32\...\iFly Jets - The 737NG for FSX) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Internet Manager (HKLM\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Island of Malta FSX 1.00 (HKLM-x32\...\Island of Malta FSX 1.00) (Version:  - )
IvAc v1.2.4 (b225) (HKLM-x32\...\IvAc_is1) (Version:  - IVAO)
IvAp v2.0.2 (build 2773) (HKLM-x32\...\IvAp-v2_is1) (Version:  - IVAO)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JPG2PDF 2.2 (HKLM-x32\...\JPG2PDF_is1) (Version:  - JPG2PDF Developer Team)
JustFlight DC-3 Legends of Flight (HKLM-x32\...\JustFlight DC-3 Legends of Flight) (Version:  - )
Landwirtschafts Simulator 2013 (HKLM-x32\...\FarmingSimulator2013DE_is1) (Version: 1.0 - GIANTS Software)
Level-D 767-300 for FSX (HKCU\...\Level-D 767-300 for FSX) (Version:  - )
LJLJ 2012 for FSX- freeware (HKLM\...\LJLJ 2012 for FSX- freeware) (Version: 1.10 - SST - Slovenia Scenery Team)
Loksim3D (HKLM\...\Loksim3D_is1) (Version: 2.8.3 - Loksim3D)
Majestic MJC8Q400 (HKLM-x32\...\MJC8Q400) (Version:  - )
MaldivesX FSX (HKLM-x32\...\{57D83327-6196-4FA5-999C-5AE13A506CDD}) (Version: 1.00.0000 - Place2use)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Man Lion's City 2.10 (HKLM-x32\...\Man Lion's City 2.10) (Version:  - )
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.2 (DEU) (Version: 4.5.51209 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Version: 4.5.51209 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Flight Simulator X (x32 Version: 10.0.61355.0 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X Service Pack 1 (x32 Version: 10.0.61355.0 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X Service Pack 2 (HKLM-x32\...\{E7CC4B85-DC2F-463F-8FEB-E7398E25C19A}) (Version: 10.0.61472.0 - Microsoft Game Studios)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version: 3.59 - NCH Software)
Mobile Connection Manager (HKLM-x32\...\o2DE) (Version: 8.7.6.756 - Mobile Connection Manager)
Morse Runner 1.67 (HKLM-x32\...\Morse Runner_is1) (Version:  - Alex Shovkoplyas, VE3NEA)
Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla)
Mp3 To All Converter V1.37.1 (HKLM-x32\...\Mp3 To All Converter_is1) (Version:  - www.8to32.com 2001)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mudry Cap-10 (HKCU\...\Mudry Cap-10) (Version:  - )
Nitro Pro 8 (HKLM\...\{5F073B4F-C59C-43F9-9768-22F7AC6F09E9}) (Version: 8.5.5.2 - Nitro)
Nitro Reader 3 (HKLM\...\{4E1C1F33-BD77-4D84-8FEC-6DE9977BFBF2}) (Version: 3.5.2.10 - Nitro)
NVIDIA 3D Vision Controller-Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.01 - aerosoft)
PDF24 Creator 5.4.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Plan-G v3.1 Version 3.1 (HKLM-x32\...\{BC13ABF2-2C08-42A6-A5C4-AFCE666ABE58}_is1) (Version: 3.1 - TA Studio)
PMDG 737 6700 NGX RTM (HKLM-x32\...\{C7EE862A-D83D-4A9F-B746-CBDE39BD7001}) (Version: 1.00.3219 - PMDG Simulations, LLC.)
PMDG 737 8900 NGX (HKLM-x32\...\{20708FD5-E94D-4097-A21E-E28564CDBC06}) (Version: 1.00.3219 - PMDG Simulations, LLC.)
PMDG 747-8i for use with PMDG 747-400X (HKLM-x32\...\{18CD57AE-E2A8-4A8D-8ECC-097841F26CAF}) (Version: 2.10.0040 - PMDG Simulations, LLC.)
QuteScoop (HKLM-x32\...\QuteScoop 2.1.1) (Version: 2.1.1 - QuteScoop)
QuteScoop (HKLM-x32\...\QuteScoop 2.1.12beta) (Version: 2.1.12beta - QuteScoop)
RAAS Professional by FS2Crew (LOCKED) (HKLM-x32\...\RAAS Professional by FS2Crew (LOCKED)) (Version:  - )
Railworks 3 Train Simulator 2012 Deluxe (HKLM-x32\...\Railworks 3 Train Simulator 2012 Deluxe_is1) (Version:  - )
Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.13.0 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.531.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6423 - Realtek Semiconductor Corp.)
RGFLIGHT-Salzburg-Airport-2008-X-v1.0 (HKCU\...\RGFLIGHT-Salzburg-Airport-2008-X-v1.0) (Version:  - )
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
screenPusher 1.3 (HKLM-x32\...\sceenPusher_is1) (Version:  - Alex Wemmer <alex@wemmer.at>)
setup version 1.0 (HKLM-x32\...\{8ACF0A2F-1873-4062-9769-0BD350554888}_is1) (Version: 1.0 - )
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
SLO4FSX - LOD11 mesh - free (HKLM\...\SLO4FSX - LOD11 mesh - free) (Version: 1.0 - SST - Slovenia Scenery Team)
Spec Ops The Line (HKLM-x32\...\Spec Ops The Line_is1) (Version:  - )
Spotify (HKCU\...\Spotify) (Version: 0.8.4.107.g4fa0003f - Spotify AB)
SquawkBox (HKLM-x32\...\SquawkBox) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steinberg Cubase LE AI Elements 6 64bit (HKLM\...\{8EEEB23E-A3EB-44A4-AEE9-D2FD6F96E4A0}) (Version: 6.0.2 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 1.5.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content for Cubase LE AI Elements (HKLM-x32\...\{CF45002F-2205-4116-BB51-2D015F436CAC}) (Version: 1.5.2.000 - Steinberg Media Technologies GmbH)
TeamSpeak 2 RC2 (HKLM-x32\...\Teamspeak 2 RC2_is1) (Version: 2.0.32.60 - Dominating Bytes Design)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Real VCBI™ X (HKCU\...\The Real VCBI™ X) (Version:  - )
The SW / Vilnius International (HKLM-x32\...\The SW / Vilnius International1.0) (Version: 1.0 - The SW)
Theme Park World (HKLM-x32\...\Theme Park World) (Version:  - )
TP-LINK TL-WN725N Treiber (HKLM-x32\...\{CA236E47-2B28-40F3-8DDB-45BE148AD986}) (Version: 1.2.1 - TP-LINK)
UI-View32 (HKLM-x32\...\UI-View32_is1) (Version: 2.03 - Peak Systems)
UK2000 Gatwick Xtreme FSX  (HKLM-x32\...\UK2000 Gatwick Xtreme FSX) (Version: 3.00 - UK2000 Scenery)
UK2000 Heathrow Xtreme FSX  (HKLM-x32\...\UK2000 Heathrow Xtreme) (Version: 2.01 - UK2000 Scenery)
UKBB - Boryspil` International FSX version 1.00 (HKLM-x32\...\{D95966D4-88B8-4899-BE5B-D23CD93C0E19}}_is1) (Version: 1.00 - InterSkyStudio)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{128A5449-CF71-4DA4-A746-F49E3B5DB584}) (Version:  - Microsoft)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
VAT-Spy (HKLM-x32\...\VATSpy) (Version:  - )
Virtual AWOS version 0.9.3 Beta (HKLM-x32\...\{0a7939c9-e4ae-49dc-8a9e-6aae7d61fd94}_is1) (Version: 0.9.3 Beta - Bafio)
VistaMare ViMaCore X (HKLM-x32\...\ViMaCore X) (Version:  - )
VLC media player 2.1.1 (HKLM-x32\...\VLC media player) (Version: 2.1.1 - VideoLAN)
VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version:  - )
vPilot (HKCU\...\vPilot) (Version: 1.1.5365.23193 - Ross Carlson)
WAV To MP3 V2 (HKLM-x32\...\WAV To MP3_is1) (Version:  - hxxp://www.WAVMP3.net)
WaveLab Demo (HKLM-x32\...\WaveLabDemo) (Version: 5.0.0.219 - Steinberg)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.58 - NCH Software)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WordToPDF 2.9 (HKLM-x32\...\WordToPDF_is1) (Version: 2.9 - Mario Noack)
Worms Reloaded with Update 10 (HKLM-x32\...\Worms Reloaded_is1) (Version: 1.0.0.10 - Team17)
XAcars for Microsoft Flightsimulator (HKLM-x32\...\{AA755AA7-B941-48A0-828C-7F43975E3EDE}_is1) (Version: 2.5 - XAcars Development Team)
XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version:  - )
YTD Toolbar v9.4 (HKLM-x32\...\{C603944F-D15F-4B6A-92CA-493EE78E25EB}) (Version: 9.4 - Spigot, Inc.) <==== ATTENTION
YTD Video Downloader 4.8.3 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.3 - GreenTree Applications SRL)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2500248329-1858572524-4161465595-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gabriele\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

19-09-2014 20:12:04 Windows Update
23-09-2014 09:15:18 Windows Update
27-09-2014 09:58:32 Windows Update
27-09-2014 12:21:46 Gerätetreiber-Paketinstallation: Apowersoft Audio-, Video- und Gamecontroller

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1FC0DC4B-6538-4685-8891-71CB5462C015} - System32\Tasks\{D32598F9-6671-4060-AC29-543C03C83C4E} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.10.0.116.259&amp;LastError=12007
Task: {3BD14EB3-E0E3-4155-A6EC-5450544CCD20} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe [2014-04-30] (Megaify Software Co., Ltd.)
Task: {6E42BC8A-F08F-4DE4-8D13-AE416AD487FD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {829066B3-EE7F-40C6-9C19-88F5BEBB7BE5} - System32\Tasks\ZAISG => C:\Users\Gabriele\AppData\Roaming\ZAISG.exe [2014-09-27] (CinPlV27.09)
Task: {9A11D94D-8447-4BCA-BEBD-4E65132A50F1} - System32\Tasks\{7CBC212C-CAFF-46A6-BD59-4286B7B7B4C0} => C:\Program Files (x86)\mackoy\BVE4\Bve.exe [2005-05-01] ( )
Task: {C1117ADF-5AFF-451B-BCCD-536B52F2E574} - System32\Tasks\{A1F92ACF-E16E-4702-A161-13A5B42DF983} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.10.0.116.259&amp;LastError=12002
Task: {C5C68671-9BED-42AA-A723-E46A899D0E9C} - System32\Tasks\GPUpdateCheck => C:\Program Files (x86)\GetPrivate\gpup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\Windows\Tasks\ZAISG.job => C:\Users\Gabriele\AppData\Roaming\ZAISG.exe
Task: C:\Windows\Tasks\{A51A305B-0D75-49E8-94F1-F0B94CDD52C8}.job => c:\program files (x86)\mozilla firefox\firefox.exe

==================== Loaded Modules (whitelisted) =============

2012-12-20 01:53 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-07-14 00:30 - 2012-07-14 00:30 - 01193176 _____ () C:\Users\Gabriele\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
2013-01-02 14:33 - 2012-04-06 04:16 - 00221512 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe
2013-01-02 14:33 - 2012-04-06 04:16 - 00037192 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\db_daemon.exe
2014-08-27 15:00 - 2014-08-27 15:00 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-27 15:00 - 2014-08-27 15:00 - 00066864 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-05 08:16 - 2014-02-17 19:13 - 00092984 _____ () C:\Program Files (x86)\DriverToolkit\zlibwapi.dll
2013-01-02 14:33 - 2011-05-06 05:03 - 00594944 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\dbus-1.dll
2013-01-02 14:33 - 2012-04-06 04:14 - 00099840 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\itapi.dll
2013-01-02 14:33 - 2012-04-06 04:14 - 00027648 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\log.dll
2013-01-02 14:33 - 2010-10-14 11:37 - 00971776 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\libxml2.dll
2013-01-02 14:33 - 2010-10-14 11:37 - 00080688 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\zlib1.dll
2013-01-02 14:33 - 2012-04-06 04:14 - 00058880 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\coder.dll
2013-01-02 14:33 - 2012-04-06 04:14 - 00043520 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\audio.dll
2013-01-02 14:33 - 2012-04-06 04:14 - 00036352 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\libConfig.dll
2013-01-02 14:33 - 2012-04-06 04:15 - 00021504 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\libctlsvr.dll
2013-01-02 14:33 - 2011-12-26 09:41 - 00090624 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\CaptureCrash.dll
2013-01-02 14:33 - 2007-09-09 17:07 - 00151552 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\libexpat.dll
2013-01-02 14:33 - 2011-05-06 05:02 - 00341504 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\sqlite3.dll
2014-03-19 19:59 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\Gabriele\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-09-28 12:41 - 2014-09-24 07:09 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-2500248329-1858572524-4161465595-500 - Administrator - Enabled) => C:\Users\Administrator
Gabriele (S-1-5-21-2500248329-1858572524-4161465595-1000 - Administrator - Enabled) => C:\Users\Gabriele
Gast (S-1-5-21-2500248329-1858572524-4161465595-501 - Limited - Disabled)
Maus (S-1-5-21-2500248329-1858572524-4161465595-1003 - Limited - Enabled) => C:\Users\Maus

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/29/2014 10:38:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/29/2014 10:38:31 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/29/2014 01:08:13 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (09/28/2014 08:57:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.61472.0, Zeitstempel: 0x475e17d3
Name des fehlerhaften Moduls: XAudio2_7.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4c0641e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5df3a5e0
ID des fehlerhaften Prozesses: 0x15b4
Startzeit der fehlerhaften Anwendung: 0xfsx.exe0
Pfad der fehlerhaften Anwendung: fsx.exe1
Pfad des fehlerhaften Moduls: fsx.exe2
Berichtskennung: fsx.exe3

Error: (09/28/2014 06:55:25 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Gabriele-PC)
Description: Die Anwendung oder der Dienst "Skype Updater" konnte nicht neu gestartet werden.

Error: (09/28/2014 06:55:12 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Gabriele-PC)
Description: Die Anwendung oder der Dienst "BlueStacks Agent" konnte nicht heruntergefahren werden.

Error: (09/28/2014 06:47:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/28/2014 06:47:10 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/28/2014 06:34:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/28/2014 06:33:34 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


System errors:
=============
Error: (09/29/2014 10:38:31 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (09/29/2014 10:38:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst RaMediaServer erreicht.

Error: (09/29/2014 10:36:46 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASAPIW2K.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/29/2014 10:36:23 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASAPIW2K.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/28/2014 06:47:10 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (09/28/2014 06:46:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst RaMediaServer erreicht.

Error: (09/28/2014 06:45:22 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASAPIW2K.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/28/2014 06:44:59 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASAPIW2K.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/28/2014 06:33:34 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (09/28/2014 06:33:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst RaMediaServer erreicht.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-09-29 10:36:45.844
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-29 10:36:45.782
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 18:45:21.064
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 18:45:21.002
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 18:30:56.422
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 18:30:56.359
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 13:20:10.002
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 13:20:09.940
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\raspppoe.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-28 13:01:21.071
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-28 13:01:20.978
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
Percentage of memory in use: 25%
Total physical RAM: 8175.12 MB
Available physical RAM: 6096.26 MB
Total Pagefile: 16348.41 MB
Available Pagefile: 13792.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:453.62 GB) NTFS
Drive g: (TPW) (CDROM) (Total:0.62 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5A34A64D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-09-29 14:09:46
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 ST1000DM005_HD103SJ rev.1AJ10001 931.51GB
Running: Gmer-19357.exe; Driver: C:\Users\Gabriele\AppData\Local\Temp\pwlyrkob.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe[2100] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000768d1465 2 bytes [8D, 76]
.text  C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe[2100] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000768d14bb 2 bytes [8D, 76]
.text  ...                                                                                                                                * 2

---- EOF - GMER 2.1 ----