Windows 7: Lauter Links und neue Fenster in Chrome

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-10-2014 01
Ran by bonger at 2014-10-31 10:06:04
Running from C:\Users\bonger\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Download Assistant (HKLM\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.9 - Adobe Systems Incorporated)
Adobe Dreamweaver CS3 (HKLM\...\Adobe_435a6af7459cb02a9c1138113a26e93) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Fireworks CS6 (HKLM\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.1.601 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.)
Anno 2070 (HKLM\...\{435C32E1-96F0-4518-B051-A5403900C389}_is1) (Version: 1.01 - RAF)
AnyDVD (HKLM\...\AnyDVD) (Version: 6.7.1.0 - SlySoft)
Apple Application Support (HKLM\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C0CC75CD-F5B7-46AD-B016-17C0F5171718}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed (HKLM\...\{8CFA9151-6404-409A-AF22-4632D04582FD}) (Version: 1.02 - Ubisoft)
Avira (HKLM\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Bonjour-Druckdienste (HKLM\...\{9D210D79-AEC5-453B-960C-4DD2C73931E1}) (Version: 2.0.2.0 - Apple Inc.)
BPM-Studio 4 Demo (HKLM\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.93 - AlcaTech)
calibre (HKLM\...\{42C91438-46F2-4017-919B-C1081F732F07}) (Version: 0.8.70 - Kovid Goyal)
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.7 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version: 1.7 - Activision) Hidden
Call of Duty: Black Ops II (HKLM\...\Call of Duty: Black Ops II_is1) (Version:  - )
Civilization III Play the World (HKLM\...\{E8650C8D-CCB2-496E-816C-ECC54A7EE411}) (Version:  - )
CloneDVD2 (HKLM\...\CloneDVD2) (Version: 2.9.2.8 - Elaborate Bytes)
Common Desktop Agent (Version: 1.53.0 - OEM) Hidden
CopyTrans Control Center deinstallieren (HKCU\...\CopyTrans Suite) (Version: 3.003 - WindSolutions)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version:  - Valve)
Crysis® 2 (HKLM\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.0.0.0 - Electronic Arts)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
EA Download Manager (HKLM\...\EADM) (Version: 7.1.3.3 - Electronic Arts, Inc.)
eReg (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Free M4a to MP3 Converter 7.1 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free Window Registry Repair (HKLM\...\Free Window Registry Repair) (Version:  - )
Free YouTube to MP3 Converter version 3.12.41.623 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.41.623 - DVDVideoSoft Ltd.)
GameSpy Comrade (HKLM\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.22.105 - Google, Inc.)
Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Grand Theft Auto IV (HKLM\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto San Andreas (HKLM\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto: Episodes From Liberty City (HKLM\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games)
Hold 'Em (HKLM\...\HoldEm) (Version: 6.0.6000.17034 - Microsoft Corporation)
iCloud (HKLM\...\{8D9592B4-7E22-4D1F-B2CB-B5F0F2F619CB}) (Version: 4.0.3.56 - Apple Inc.)
ICQ7.2 (HKLM\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ)
iTunes (HKLM\...\{F32DC846-4457-40A8-BECA-BCC0E960BC53}) (Version: 11.4.0.18 - Apple Inc.)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java SE Development Kit 7 Update 51 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170510}) (Version: 1.7.0.510 - Oracle)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech SetPoint 6.52 (HKLM\...\sp6) (Version: 6.52.74 - Logitech)
LookThisUp (HKLM\...\LookThisUp) (Version: 1.0.2 - LookThisUp) <==== ATTENTION
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 7.0.1 (x86 de) (HKLM\...\Mozilla Firefox 7.0.1 (x86 de)) (Version: 7.0.1 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 (HKLM\...\{D6C9AF27-9414-46C8-B9D8-D878BA041031}) (Version: 8.3.312 - Nero AG)
Nokia Connectivity Cable Driver (HKLM\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia)
Nokia PC-Internetzugang (HKLM\...\Nokia PC Internet Access) (Version: 1.1.1.2 - Nokia)
Nokia PC-Internetzugang (Version: 1.1.1.2 - Nokia) Hidden
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.3.86.0 - Nokia)
Nokia Suite (Version: 3.3.86.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.5.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.49 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
One Click PDF 2.0 (HKLM\...\{E32D85B0-1B37-4192-81F1-46804EE760E3}) (Version: 2.00.0030 - Sowedoo Software)
PC Connectivity Solution (HKLM\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia)
PDF Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CC (Version: 12.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.3.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
pdfforge Images2PDF 0.9.7.1125 (HKLM\...\{00120495-F25C-4F44-9DC7-2D812D025DBA}) (Version: 0.9.7.1125 - pdfforge)
PDFzuWord Professional (HKLM\...\PDFzuWord Professional_is1) (Version:  - )
PhotoSync (HKLM\...\{1F4C691C-FB95-4EB7-964E-5DD767B9F6AD}) (Version: 2.2.4 - touchbyte GmbH)
PhotoSync (HKLM\...\{C80C0208-EC0C-4AB1-954A-C2E77E266858}) (Version: 2.1.2 - touchbyte GmbH)
photoSync shell (HKLM\...\{E3F2CE9F-ABC1-4ED9-86A7-B724061B2B7F}) (Version: 1.0.1 - webEcoz, LLC.)
photoSync v1.2.13 (HKLM\...\{44556BAF-0209-4CBC-B333-2D6BB69AA43E}_is1) (Version: 1.2.13 - webEcoz, LLC.)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Preispiraten (HKLM\...\{40A0ED36-C895-4783-87AD-85ABB7FB6B2A}) (Version: 2.5 - metaspinner media GmbH)
Preispiraten (HKLM\...\{5384EA8A-FECA-4D6E-B7B4-3D4D9D47E5DF}) (Version: 6 - metaspinner net GmbH)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Rockstar Games Social Club (HKLM\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games)
S.T.A.L.K.E.R. - Clear Sky (HKLM\...\S.T.A.L.K.E.R. - Clear Sky_is1) (Version: 1.0001 - Deep Silver)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.02.06.07 - Samsung Electronics Co., Ltd.)
Samsung ML-2160 Series (HKLM\...\Samsung ML-2160 Series) (Version: 1.08 (24.08.2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00.04 - Samsung Electronics Co., Ltd.)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Sweet Home 3D version 4.4 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
TeamViewer (HKLM\...\TeamViewer) (Version:  - )
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.20935 - TeamViewer)
TortoiseOverlays (HKLM\...\{7BA596FB-144D-44EB-A7E6-ABAE3D24204F}) (Version: 1.1.19334 - TortoiseSVN)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2 - TuneUp Software) Hidden
TVersity Codec Pack 1.7 (HKLM\...\TVersity Codec Pack) (Version: 1.7 - TVersity Inc.)
TVersity Media Server 1.9.7 (HKLM\...\TVersity Media Server) (Version: 1.9.7 - TVersity)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Updater Service (HKLM\...\Updater Service) (Version: 11,6,20,2 - ) <==== ATTENTION
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Virtual DJ Home - Atomix Productions (HKLM\...\Virtual DJ Home - Atomix Productions) (Version:  - )
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VirtualDJ Home FREE (HKLM\...\{19192A84-6172-4312-A661-D8F9A34585AB}) (Version: 7.0.4.1 - Atomix Productions)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
vShare.tv plugin 1.3 (HKLM\...\vShare.tv plugin) (Version: 1.3 - vShare.tv, Inc.) <==== ATTENTION
webssearches uninstall (HKLM\...\webssearches uninstall) (Version:  - webssearches) <==== ATTENTION
Wi-Fi MediaConnect (HKLM\...\{AA58346A-A5D7-4659-91D6-38D07345BDCF}) (Version: 1.6.43 - Philips)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WindowsMangerProtect20.0.0.1013 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.1013 - WindowsProtect LIMITED) <==== ATTENTION
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
ZBrush 4R6 (HKLM\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1049129853-3666174710-3722791784-1000_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> C:\Windows\system32\comdlg32.ocx (Microsoft Corporation)

==================== Restore Points  =========================

14-10-2014 06:55:42 Windows Update
16-10-2014 06:38:17 Installed Java 7 Update 71
16-10-2014 07:05:53 Windows Update
21-10-2014 14:01:27 Windows Update
24-10-2014 14:12:34 Windows Update
28-10-2014 07:44:40 Windows Update
29-10-2014 14:00:02 Säuberung (Spybot - Search & Destroy 2.4, Administratorrechte)
29-10-2014 15:04:50 RCP Mi, Okt 29, 14  16:04

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2013-09-13 19:37 - 00000898 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lmlicenses.wip4.adobe.com
    127.0.0.1 lm.licenses.adobe.com

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {167FF12E-338D-4CC6-B22E-4E8A6B4815E4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {4677014E-2033-4BE3-9354-045A28B6A522} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {760490E2-009F-4A3A-BED9-9A711AFEFC12} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {8DF8CC54-9310-4617-8236-86B16A9CFE31} - System32\Tasks\AdobeAAMUpdater-1.0-bonger-PC-bonger => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {9E56E1B3-D4F9-4FCB-AB58-428B1A77EB58} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {AABC03D5-7765-441A-99D4-A4B16B7AA6B8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {ABEC9295-40AB-46FF-BEE6-807EE8310D24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {C83FC246-0975-4CCD-9C63-3701A2F93459} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {DADA4C33-C899-46DD-B58D-0FD6BE4E428D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FD6E2A7C-6EF3-4C44-A7A4-882C41612684} - System32\Tasks\Google Updater and Installer => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-04-19 04:21 - 2013-06-21 10:52 - 00079648 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2011-04-25 11:25 - 2011-04-25 11:25 - 00024064 _____ () C:\Windows\System32\ssj1mlm.dll
2012-10-05 10:51 - 2012-10-05 10:51 - 00911872 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssj1mdu.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 02602864 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll
2014-01-04 14:53 - 2010-01-31 20:56 - 00024576 _____ () C:\Program Files\photoSync\servicemanager.pyd
2014-01-04 14:53 - 2010-01-31 20:14 - 00118784 _____ () C:\Program Files\photoSync\pywintypes25.dll
2014-01-04 14:53 - 2010-01-31 20:56 - 00036864 _____ () C:\Program Files\photoSync\win32service.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00102400 _____ () C:\Program Files\photoSync\win32api.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00013824 _____ () C:\Program Files\photoSync\win32event.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00014848 _____ () C:\Program Files\photoSync\win32evtlog.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00053248 _____ () C:\Program Files\photoSync\_socket.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00671744 _____ () C:\Program Files\photoSync\_ssl.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00019968 _____ () C:\Program Files\photoSync\win32pipe.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00110592 _____ () C:\Program Files\photoSync\win32file.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00294912 _____ () C:\Program Files\photoSync\_hashlib.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00086016 _____ () C:\Program Files\photoSync\_ctypes.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00110592 _____ () C:\Program Files\photoSync\win32security.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00049152 _____ () C:\Program Files\photoSync\_sqlite3.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00260096 _____ () C:\Program Files\photoSync\sqlite3.dll
2014-01-04 14:53 - 2009-11-02 10:40 - 00339968 _____ () C:\Program Files\photoSync\_imaging.pyd
2014-01-04 14:53 - 2011-03-21 14:13 - 00033280 _____ () C:\Program Files\photoSync\simplejson._speedups.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00040960 _____ () C:\Program Files\photoSync\win32process.pyd
2011-03-08 18:26 - 2011-04-26 10:24 - 00066872 _____ () C:\Windows\system32\PnkBstrA.exe
2014-01-04 14:53 - 2010-01-31 20:56 - 00102400 _____ () C:\Program Files\PhotoSync\win32api.pyd
2014-01-04 14:53 - 2010-01-31 20:14 - 00118784 _____ () C:\Program Files\PhotoSync\pywintypes25.dll
2014-01-04 14:53 - 2010-01-31 20:14 - 00335872 _____ () C:\Program Files\PhotoSync\pythoncom25.dll
2014-01-04 14:53 - 2010-01-31 20:58 - 00241664 _____ () C:\Program Files\PhotoSync\win32com.shell.shell.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00053248 _____ () C:\Program Files\PhotoSync\_socket.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00671744 _____ () C:\Program Files\PhotoSync\_ssl.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00013824 _____ () C:\Program Files\PhotoSync\win32event.pyd
2014-01-04 14:53 - 2010-05-14 22:05 - 00983040 _____ () C:\Program Files\PhotoSync\wx._core_.pyd
2014-01-04 14:53 - 2010-05-14 22:07 - 00741376 _____ () C:\Program Files\PhotoSync\wx._gdi_.pyd
2014-01-04 14:53 - 2010-05-14 22:07 - 00655360 _____ () C:\Program Files\PhotoSync\wx._windows_.pyd
2014-01-04 14:53 - 2010-05-14 22:08 - 00942080 _____ () C:\Program Files\PhotoSync\wx._controls_.pyd
2014-01-04 14:53 - 2010-05-14 22:09 - 00663552 _____ () C:\Program Files\PhotoSync\wx._misc_.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00155648 _____ () C:\Program Files\PhotoSync\win32gui.pyd
2014-01-04 14:53 - 2010-05-14 22:10 - 00143360 _____ () C:\Program Files\PhotoSync\wx._xrc.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00019968 _____ () C:\Program Files\PhotoSync\win32pipe.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00110592 _____ () C:\Program Files\PhotoSync\win32file.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00294912 _____ () C:\Program Files\PhotoSync\_hashlib.pyd
2014-01-04 14:53 - 2009-11-02 10:40 - 00339968 _____ () C:\Program Files\PhotoSync\_imaging.pyd
2014-01-04 14:53 - 2010-01-31 20:11 - 00086016 _____ () C:\Program Files\PhotoSync\_ctypes.pyd
2014-01-04 14:53 - 2011-03-21 14:13 - 00033280 _____ () C:\Program Files\PhotoSync\simplejson._speedups.pyd
2014-01-04 14:53 - 2010-01-31 20:54 - 00040960 _____ () C:\Program Files\PhotoSync\win32process.pyd
2014-01-04 14:53 - 2010-01-31 20:56 - 00110592 _____ () C:\Program Files\PhotoSync\win32security.pyd
2013-12-19 10:49 - 2013-12-19 10:49 - 32733080 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 04696432 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2011-07-29 20:31 - 2011-07-29 20:31 - 01249064 _____ () C:\ProgramData\TVersity\Media Server\MediaServer.exe
2011-07-13 19:36 - 2011-07-13 19:36 - 00347944 _____ () C:\ProgramData\TVersity\Media Server\taglib.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00225064 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_lcms_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00031528 _____ () C:\ProgramData\TVersity\Media Server\CORE_RL_xlib_.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00716584 _____ () C:\ProgramData\TVersity\Media Server\log4cxx.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 04534072 _____ () C:\ProgramData\TVersity\Media Server\avcodec-52.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00083768 _____ () C:\ProgramData\TVersity\Media Server\avutil-50.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00313640 _____ () C:\ProgramData\TVersity\Media Server\libmp3lame-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00795448 _____ () C:\ProgramData\TVersity\Media Server\avformat-52.dll
2011-07-13 19:35 - 2011-07-13 19:35 - 00203064 _____ () C:\ProgramData\TVersity\Media Server\swscale-0.dll
2011-07-13 19:36 - 2011-07-13 19:36 - 00509720 _____ () C:\ProgramData\TVersity\Media Server\sqlite3.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00716616 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\libglesv2.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 00100168 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\libegl.dll
2014-02-23 11:20 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-23 11:20 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2010-11-12 17:35 - 2007-04-09 17:37 - 01649152 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\Photoshop.dll
2010-11-12 17:35 - 2007-04-09 17:36 - 00012800 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\QuickTimeGlue.dll
2010-11-12 17:35 - 2007-04-09 17:36 - 00160256 _____ () C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\AdobeXMP.dll
2009-02-26 12:46 - 2009-02-26 12:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 10:46 - 2011-06-22 10:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:117E206F

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Wi-Fi MediaConnect.lnk => C:\Windows\pss\Wi-Fi MediaConnect.lnk.CommonStartup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Google Update => "C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: NBKeyScan => "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Realtime Audio Engine => "mmrtkrnl.exe" /i
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-1049129853-3666174710-3722791784-500 - Administrator - Disabled)
ASPNET (S-1-5-21-1049129853-3666174710-3722791784-1006 - Limited - Enabled)
bonger (S-1-5-21-1049129853-3666174710-3722791784-1000 - Administrator - Enabled) => C:\Users\bonger
Gast (S-1-5-21-1049129853-3666174710-3722791784-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1049129853-3666174710-3722791784-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-1049129853-3666174710-3722791784-1007 - Limited - Enabled) => C:\Users\TEMP

==================== Faulty Device Manager Devices =============

Name: MIPv432
Description: MIPv432
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: MIPv432
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/31/2014 08:55:13 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/31/2014 08:54:29 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/31/2014 08:54:28 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/31/2014 08:04:06 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (10/31/2014 08:04:06 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (10/30/2014 09:44:54 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (10/30/2014 09:44:54 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (10/29/2014 04:16:54 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: bonger-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (10/29/2014 04:16:54 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: bonger-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (10/29/2014 04:04:50 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-1049129853-3666174710-3722791784-1007.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {9414e864-9fdd-4b8d-9291-0f3cdf061afa}


System errors:
=============
Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (10/31/2014 08:05:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (10/31/2014 08:05:57 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (10/31/2014 08:05:57 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (10/31/2014 08:05:46 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (10/31/2014 08:05:46 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (10/31/2014 08:05:46 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (10/31/2014 08:05:40 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (09/27/2012 03:28:30 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1814 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (07/15/2012 09:11:32 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 127 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/23/2011 08:11:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1549 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/21/2010 01:46:08 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12526 seconds with 3480 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Quad CPU Q8300 @ 2.50GHz
Percentage of memory in use: 74%
Total physical RAM: 3326.18 MB
Available physical RAM: 853.42 MB
Total Pagefile: 6650.64 MB
Available Pagefile: 2366.42 MB
Total Virtual: 2047.88 MB
Available Virtual: 1907.53 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.32 GB) (Free:390.16 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive h: (CALL OF DUTY BLA) (CDROM) (Total:7.95 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=931.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2014 01
Ran by bonger (administrator) on BONGER-PC on 31-10-2014 10:05:24
Running from C:\Users\bonger\Downloads
Loaded Profiles: bonger & UpdatusUser (Available profiles: bonger & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\peservice.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(webEcoz, LLC.) C:\Program Files\PhotoSync\Sync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(LookThisUp) C:\Users\bonger\AppData\Roaming\LookThisUp\LookThisUp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\ProgramData\TVersity\Media Server\MediaServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Adobe Systems, Incorporated) C:\Users\bonger\Programme\Adobe Photoshop_CS3_Portable-Sp33dcrew\UnvollständigPhotoshop_CS3_Portable-Sp33dcrew\Photoshop.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-03] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM\...\Run: [sync] => C:\Program Files\photoSync\sync.exe [276992 2013-10-08] (webEcoz, LLC.)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [Google Update] => C:\Users\bonger\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-19] (Google Inc.)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\Run: [LookThisUp] => C:\Users\bonger\AppData\Roaming\LookThisUp\LookThisUp.exe [1848976 2014-10-29] (LookThisUp)
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {00f6cfd2-1ca4-11e3-b7c7-00242178bae9} - H:\hmh-codbo2ger.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {123ce3af-49a3-11e0-aec2-00242178bae9} - I:\raf-anno2070.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {26ebb527-0096-11e2-a0a9-00242178bae9} - I:\hmh-codbo2ger.exe
HKU\S-1-5-21-1049129853-3666174710-3722791784-1000\...\MountPoints2: {78443e54-98a9-11e0-85eb-00242178bae9} - J:\NokiaPCIA_Autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-16] (Microsoft Corporation)
Startup: C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (hxxp://tortoisesvn.net)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:58045;https=127.0.0.1:58045
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l8BnrRdg35NVnMm3p7g,,&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX&q={searchTerms}
BHO: PreispiratenSearchURL -> {0B660087-931C-4056-A04F-0423890E40B6} -> C:\Program Files\Preispiraten\Preispiraten2\PPSearchURL.dll ()
BHO: Zonealarm Helper Object -> {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} ->  No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: IE5BarLauncherBHO Class -> {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} -> C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
BHO: amazon -> {84B94901-3645-4D80-A6B7-4D0050B19455} -> C:\Program Files\Preispiraten6\IEButtonAmazonInterface.dll ()
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: metaspinner media GmbH -> {CD9B7762-DFBC-42B1-BB30-02A78287B456} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll ()
BHO: metaspinner media GmbH -> {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} -> C:\Program Files\Preispiraten\Preispiraten2\IEButtonPPInterface.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> C:\Program Files\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - No Name - {99079a25-328f-4bd4-be04-00955acaa0a7} -  No File
Toolbar: HKLM - No Name - !{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} -  No File
Toolbar: HKLM - No Name - !{95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} -  No File
Toolbar: HKLM - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} -  No File
Toolbar: HKCU - No Name - {4C350B19-6CA1-4569-B14C-296D8D6535B2} -  No File
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
Toolbar: HKCU - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} -  No File
Toolbar: HKCU - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default
FF NewTab: hxxp://istart.webssearches.com/newtab/?type=nt&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hp&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX
FF Keyword.URL: hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAb73v8hpPF8UGJXlmEHt88OVgGd9Va-0IVa8Q89c8XlhH2LXgd00JKyCWlgDUsf5Qr5uJhgVX9NPpFaCzpys6K3cVSliWAwmET5tEvaL6TrelP4iE9hintQFZy0EBWTSDCzKt3kTORp-y4l9-kuWbBjytaVFmHJQA,,&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_25\bin\new_plugin\npjp2.dll No File
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer -> C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\bonger\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\bonger\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll (vShare.tv )
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\webssearches.xml
FF Extension: 20-20 3D Viewer - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\2020Player@2020Technologies.com [2010-11-12]
FF Extension: Virtus Search Opt-in - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\extension@virtusdesigns.com [2010-11-26]
FF Extension: Fast Start - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\faststartff@gmail.com [2014-10-29]
FF Extension: TVU Web Player - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\firefox@tvunetworks.com [2011-04-23]
FF Extension: SpecialSavings - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\specialsavings@superfish.com [2012-03-13]
FF Extension: Eclipse - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{12bc3590-67a6-11de-8a39-0800200c9a66} [2010-11-26]
FF Extension: FT DeepDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2012-07-10]
FF Extension: ICQ Toolbar - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-08-05]
FF Extension: iMacros for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2014-03-05]
FF Extension: FT GraphiteGlow - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{99e34760-2754-11e0-91fa-0800200c9a66} [2012-07-10]
FF Extension: FT SleekDark - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{a21cd440-41d6-11e0-9207-0800200c9a66} [2012-07-10]
FF Extension: Preispiraten - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C} [2010-11-22]
FF Extension: Greasemonkey - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-10-16]
FF Extension: NASA Night Launch - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\nasanightlaunch@example.com.xpi [2011-10-26]
FF Extension: Amazon Startcenter - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{144D1513-0819-4538-AD26-D515AF443AE7}.xpi [2012-07-10]
FF Extension: Amazon Statusbar Button - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{32DD6873-2BC0-4E4B-B9A3-0E602AB0DC14}.xpi [2012-07-10]
FF Extension: FXOpera - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{e7c7d1b3-5984-410e-9f1e-54e3f8490e8e}.xpi [2011-10-26]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2012-03-13]
FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2012-07-18]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-03-16]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-06-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-10-12]
FF HKLM\...\Firefox\Extensions: [fe_7.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2012-02-23]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-27]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles\6wf3z6x7.default\extensions\faststartff@gmail.com
FF HKLM\...\Thunderbird\Extensions: [te_9.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012-02-23]
FF HKCU\...\Firefox\Extensions: [specialsavings@superfish.com] - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles/6wf3z6x7.default\extensions\specialsavings@superfish.com
FF Extension: SpecialSavings - C:\Users\bonger\AppData\Roaming\Mozilla\Firefox\Profiles/6wf3z6x7.default\extensions\specialsavings@superfish.com [2012-03-13]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX

Chrome: 
=======
CHR Profile: C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Adblock Plus) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-31]
CHR Extension: (Google-Suche) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (Logitech SetPoint) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2014-07-25]
CHR Extension: (vshare plugin) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj [2014-07-25]
CHR Extension: (Google Wallet) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR Extension: (Google Mail) - C:\Users\bonger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-23]
CHR HKLM\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2013-06-27]
CHR HKLM\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\bonger\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-06-09]
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx [2011-08-31]
CHR HKCU\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\bonger\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-06-09]
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe hxxp://istart.webssearches.com/?type=sc&ts=1414594856&from=cvs2&uid=HitachiXHDT721010SLA360_STF607MH30254K30254KX

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [994096 2014-10-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2010-11-12] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 peservice; C:\Program Files\photoSync\peservice.exe [41472 2013-10-08] (webEcoz, LLC.) [File not signed]
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2011-04-26] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TVersityMediaServer; C:\ProgramData\TVersity\Media Server\MediaServer.exe [1249064 2011-07-29] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [488960 2014-10-29] (Fuyu LIMITED) [File not signed]
S2 CltMngSvc; No ImagePath

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [108480 2010-09-14] (SlySoft, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-02-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37384 2014-10-15] (Avira Operations GmbH & Co. KG)
S3 bdacap; C:\Windows\System32\drivers\bdacap.sys [322048 2006-11-03] (Genesys Logic, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-09-13] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [44296 2013-01-03] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12808 2013-01-03] (Logitech, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-02-05] ()
R1 MIPFSv332; C:\Windows\system32\drivers\MIPFSv332.sys [145960 2010-09-20] (GetData Pty Ltd)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
S3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [60032 2010-04-21] (Razer USA Ltd) [File not signed]
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [611064 2011-03-08] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R3 WFMC_VAD; C:\Windows\System32\DRIVERS\wfmcvad.sys [19456 2010-02-08] (WiFi Media Connect)
S1 ArcSec; system32\drivers\ArcSec.sys [X]
S1 MIPv432; \??\C:\Windows\system32\drivers\MIPv432.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-31 09:43 - 2014-10-31 09:44 - 00045704 _____ () C:\Users\bonger\Downloads\Addition.txt
2014-10-31 09:41 - 2014-10-31 10:05 - 00034401 _____ () C:\Users\bonger\Downloads\FRST.txt
2014-10-31 09:40 - 2014-10-31 10:05 - 00000000 ____D () C:\FRST
2014-10-31 09:40 - 2014-10-31 09:40 - 01105408 _____ (Farbar) C:\Users\bonger\Downloads\FRST.exe
2014-10-31 09:34 - 2014-10-31 09:34 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-31 09:31 - 2014-10-31 09:31 - 00638888 _____ (Oracle Corporation) C:\Users\bonger\Downloads\chromeinstall-8u25.exe
2014-10-31 08:04 - 2014-10-31 08:04 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-10-31 08:04 - 2014-10-31 08:04 - 00000000 ____D () C:\Users\TEMP
2014-10-31 08:04 - 2012-02-16 15:45 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-10-31 08:04 - 2010-11-15 12:44 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-10-31 08:04 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-31 08:04 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-29 16:05 - 2014-10-29 16:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\dlg
2014-10-29 16:01 - 2014-10-31 08:19 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Systweak
2014-10-29 16:01 - 2014-10-31 08:05 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\LookThisUp
2014-10-29 16:01 - 2014-10-29 16:01 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-10-29 16:01 - 2014-10-06 16:36 - 00018248 _____ () C:\Windows\system32\roboot.exe
2014-10-29 16:00 - 2014-10-29 16:00 - 00664432 _____ () C:\Users\bonger\Downloads\RegpairSetup-Downloader.exe
2014-10-29 15:26 - 2014-10-29 16:04 - 00000000 ____D () C:\Program Files\Free Window Registry Repair
2014-10-29 15:26 - 2014-10-29 15:26 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2014-10-29 15:26 - 2014-10-29 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2014-10-29 15:24 - 2014-10-29 15:25 - 00370560 _____ () C:\Users\bonger\Downloads\SoftonicDownloader_fuer_free-window-registry-repair.exe
2014-10-29 14:48 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144821.backup
2014-10-29 14:44 - 2013-09-13 19:37 - 00000898 _____ () C:\Windows\system32\Drivers\etc\hosts.20141029-144409.backup
2014-10-29 14:34 - 2014-10-31 08:22 - 00000155 _____ () C:\Windows\wininit.ini
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-29 14:16 - 2014-10-31 08:22 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-10-29 14:15 - 2014-10-29 14:15 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\bonger\Downloads\spybot-2.4.exe
2014-10-26 09:03 - 2014-10-26 09:11 - 02817032 _____ () C:\Users\bonger\Downloads\wulogo4254.rar
2014-10-23 14:53 - 2014-10-23 14:53 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285 (1).exe
2014-10-23 14:50 - 2014-10-23 14:50 - 00000000 ____D () C:\Program Files\Adobe Download Assistant
2014-10-23 14:49 - 2014-10-23 14:50 - 00001092 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk
2014-10-23 14:49 - 2014-10-23 14:49 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2014-10-23 14:48 - 2014-10-23 14:48 - 02524336 _____ () C:\Users\bonger\Downloads\adobe-indesign_26285.exe
2014-10-21 16:16 - 2014-10-21 16:16 - 00913088 _____ () C:\Users\bonger\Downloads\postcard.psd
2014-10-20 11:05 - 2014-10-20 11:05 - 00035304 _____ () C:\Users\bonger\Downloads\janeausten.zip
2014-10-20 10:56 - 2014-10-20 10:56 - 00013179 _____ () C:\Users\bonger\Downloads\gratis.zip
2014-10-16 07:40 - 2014-10-31 09:32 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-16 07:39 - 2014-10-31 09:32 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-16 07:34 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 07:34 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 07:34 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 07:34 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 07:34 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 07:34 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 07:34 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 07:34 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 07:34 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 07:34 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 07:34 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 07:34 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 07:34 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 07:34 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 07:34 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 07:34 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 07:34 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 07:34 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 07:34 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 07:34 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 07:34 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 07:34 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 07:34 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 07:34 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 07:34 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 07:34 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 07:34 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 07:34 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 07:34 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 07:34 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 07:34 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 07:34 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 07:34 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 07:34 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 07:34 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 07:34 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 07:34 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 07:33 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 07:33 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:22 - 2014-10-15 10:22 - 03909864 _____ () C:\Users\bonger\Downloads\Hearts_II_Photoshop_Brushes_by_redheadstock.zip
2014-10-15 10:21 - 2014-10-15 10:22 - 00341606 _____ () C:\Users\bonger\Downloads\Heart_Brushes_by_XPhotoshoperX.abr
2014-10-14 09:09 - 2014-10-14 09:09 - 00928816 _____ () C:\Users\bonger\Downloads\2147495790.zip
2014-10-02 08:29 - 2014-10-02 08:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2014-10-01 05:23 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-31 10:02 - 2010-11-12 09:57 - 01267024 _____ () C:\Windows\WindowsUpdate.log
2014-10-31 09:56 - 2011-02-20 18:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-31 09:50 - 2013-09-30 19:48 - 00000000 ____D () C:\Users\bonger\AppData\Local\D584027D-25E0-4F6F-A217-1CE1A5C323F6.aplzod
2014-10-31 09:33 - 2014-02-20 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-10-31 09:33 - 2013-10-21 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-31 09:32 - 2014-09-17 03:55 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-31 09:32 - 2013-10-21 14:26 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-31 09:32 - 2010-12-15 12:39 - 00000000 ____D () C:\Program Files\Java
2014-10-31 09:15 - 2012-10-16 05:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-31 09:08 - 2011-10-26 16:00 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000UA.job
2014-10-31 08:14 - 2010-11-12 11:29 - 00000000 ____D () C:\Users\bonger\AppData\Local\Adobe
2014-10-31 08:12 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-31 08:12 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-31 08:05 - 2014-01-04 14:53 - 00000000 ____D () C:\ProgramData\photoSync
2014-10-31 08:05 - 2010-12-15 22:29 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-10-31 08:04 - 2013-07-25 13:23 - 00034834 _____ () C:\Windows\setupact.log
2014-10-31 08:04 - 2013-04-19 04:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-31 08:04 - 2011-02-20 18:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-31 08:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-30 09:52 - 2010-11-12 09:58 - 02530916 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-30 09:52 - 2009-08-14 13:34 - 00726240 _____ () C:\Windows\system32\perfh019.dat
2014-10-30 09:52 - 2009-08-14 13:34 - 00156162 _____ () C:\Windows\system32\perfc019.dat
2014-10-29 16:16 - 2013-08-16 08:22 - 00243646 _____ () C:\Windows\PFRO.log
2014-10-29 16:01 - 2014-07-25 14:39 - 00002533 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-10-29 16:01 - 2011-05-01 12:02 - 00001340 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-29 16:01 - 2010-11-12 10:00 - 00001641 _____ () C:\Users\bonger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-29 15:25 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-10-29 14:34 - 2014-01-20 07:53 - 00000000 ___RD () C:\Users\bonger\Desktop\Document
2014-10-29 13:59 - 2011-09-11 09:05 - 00681313 _____ () C:\Windows\system32\TVersityMediaServer.log
2014-10-28 06:35 - 2010-11-12 10:15 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-27 08:40 - 2010-11-12 11:16 - 00000000 ____D () C:\Users\bonger\AppData\Local\CrashDumps
2014-10-26 15:08 - 2011-10-26 16:00 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1049129853-3666174710-3722791784-1000Core.job
2014-10-21 14:55 - 2009-07-14 05:33 - 04138472 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 15:17 - 2010-11-12 10:39 - 00000000 ____D () C:\Users\bonger\AppData\Roaming\Adobe
2014-10-20 11:32 - 2010-11-12 11:01 - 00143040 _____ () C:\Users\bonger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 09:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-17 07:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-10-17 07:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-10-16 08:20 - 2010-11-12 10:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 08:17 - 2013-08-14 10:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 08:08 - 2010-11-13 07:46 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 08:06 - 2014-08-05 10:38 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-15 08:06 - 2013-10-21 04:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-15 08:06 - 2013-10-21 04:10 - 00000000 ____D () C:\Program Files\Avira
2014-10-15 08:04 - 2013-10-21 04:10 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-10-15 08:04 - 2013-10-21 04:10 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-10-02 07:55 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\bonger\AppData\Local\Temp\avgnt.exe
C:\Users\bonger\AppData\Local\Temp\GLB1A2B.EXE


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-26 08:29

==================== End Of Log ============================