Hallo Ihr es ist wieder soweit etwas hat mich wohl erwischt. War da wohl bei irgendeinem Installer unachtsam . Was für ein Unrat...
Zusätzlich habe ich folgende Ordner endeckt die ich keiner bewusst installierten Anwendung zuordnen kann:
C:\Users\Nuzoo\AppData\Local\EmieBrowserModeList;
C:\Users\Nuzoo\AppData\Local\EmieSiteList;
C:\Users\Nuzoo\AppData\Local\EmieSiteList.
Jeder Ordner enthält genau ein File mit dem Namen container.dat in Notepad angezeigt leer erscheint.

Des weiteren steht im Ereignisprotokoll ca. alle 12 min 2 mal:
Mbamchameleon Failed to obtain file name information - C01C0005

Malwarebytes Anti-Malware und Microsoft Security Essentials finden nichts mehr.

Schonmal jetzt ein herzliches Danke schön.

Hier die Logs von FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-12-2014 02
Ran by Nuzoo (administrator) on ORBIT on 08-12-2014 21:56:27
Running from C:\Desktop
Loaded Profile: Nuzoo (Available profiles: Nuzoo & Administrator & Gast)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ABBYY InfoPoisk LLC) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(UltraVNC) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(UltraVNC) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
(Sysinternals - www.sysinternals.com) K:\Downloads\procexp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Apache Software Foundation) K:\Program Files\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) K:\Program Files\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) K:\Program Files\OpenOffice 4\program\soffice.bin
(Spotify Ltd) C:\Users\Nuzoo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sysinternals - www.sysinternals.com) K:\Downloads\procexp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\mmc.exe
(Mozilla Corporation) D:\Program Files (x86)\Aurora\firefox.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\msdt.exe
(Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\charmap.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM\...\Run: [Bonus.SSR.FR11] => C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe [2558776 2014-12-04] (Malwarebytes Corporation)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [Spotify Web Helper] => C:\Users\Nuzoo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-12-07] (Spotify Ltd)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [uTorrent] => C:\Users\Nuzoo\AppData\Roaming\uTorrent\uTorrent.exe [1682512 2014-12-07] (BitTorrent Inc.)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\MountPoints2: {59e5445e-51fb-11e4-83c1-001ff344cb10} - F:\sources\sperr32.exe x64
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\MountPoints2: {c9bf244a-65d7-11e4-ad12-001ff344cb10} - F:\sources\sperr32.exe x64
IFEO\taskmgr.exe: [Debugger] "K:\DOWNLOADS\PROCEXP.EXE"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
CHR HKU\S-1-5-21-189806087-158390553-3371217362-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-189806087-158390553-3371217362-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49853;https=127.0.0.1:49853
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> {60D97BEE-7B71-4514-8485-3DDBD718A07D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> K:\Program Files\Mindjet\MindManager 14\Mm8InternetExplorer.dll (Mindjet)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> K:\Programme\bin\ssv.dll No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> K:\Programme\bin\jp2ssv.dll No File
BHO: Web Security -> {f794b26a-0d24-4538-9012-cd462b2071e4} -> C:\Program Files\Web Security\websecurity.dll (Web Security Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{267620B0-88FF-450F-AAD5-0F7848F9BBB8}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{D6498B65-2EF2-4A4B-AB07-8796E54E911D}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\i9rargvi.default-1417938174393
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> K:\Programme\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> K:\Programme\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nitropdf.com/NitroPDF -> C:\Program Files\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\user.js
FF user.js: detected! => C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\txfgy6mr.default-1416764488477\user.js
FF Extension: ADB Helper - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\adbhelper@mozilla.org [2014-11-13]
FF Extension: Firefox Developer Tools Adapters - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxdevtools-adapters@mozilla.org [2014-12-04]
FF Extension: Firefox OS 1.3 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_1_3_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 1.4 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_1_4_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.0 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_0_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.1 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_1_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.2 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_2_simulator@mozilla.org [2014-11-25]
FF Extension: Show Profile - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\show_profile@oliverpiltz.de [2014-12-02]
FF Extension: ColorfulTabs - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-12-04]
FF Extension: FireShot - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-12-01]
FF Extension: anonymoX - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\client@anonymox.net.xpi [2014-12-02]
FF Extension: pearltrees - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\collector@broceliand.fr.xpi [2014-11-18]
FF Extension: Firefox Interest Dashboard - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\firefox.interest.dashboard@up.mozilla.xpi [2014-12-02]
FF Extension: Font Finder - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fontfinder@bendodson.com.xpi [2014-12-01]
FF Extension: ProxTube - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\ich@maltegoetz.de.xpi [2014-12-02]
FF Extension: Gmail Notifier (restartless) - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi [2014-11-19]
FF Extension: Google search link fix - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid0-XWJxt5VvCXkKzQK99PhZqAn7Xbg@jetpack.xpi [2014-12-02]
FF Extension: Google™ Translator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2014-11-17]
FF Extension: SQLite Manager - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2014-12-01]
FF Extension: Google Translator for Firefox - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\translator@zoli.bod.xpi [2014-11-18]
FF Extension: UnreadTabTracker - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\unreadtabtracker@moz.sepand.xpi [2014-11-24]
FF Extension: Integrated Inbox for Gmail &amp; Google Apps - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{28197867-b1ef-4140-8e3b-55c45b9c8460}.xpi [2014-11-17]
FF Extension: Web Developer - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2014-12-01]
FF Extension: Adblock Plus - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-17]
FF Extension: BetterPrivacy - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-11-20]
FF Extension: Techgile 1.0.1 - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\txfgy6mr.default-1416764488477\Extensions\{7594955a-29b6-4548-9263-89299555d649}.xpi [2014-12-05]
FF HKLM\...\Firefox\Extensions: [{f197fd56-67d6-4c64-b489-8d258b5be5bc}] - C:\Program Files\Web Security\websecurity.xpi
FF Extension: No Name - C:\Program Files\Web Security\websecurity.xpi [2014-09-30]
FF StartMenuInternet: FIREFOX.EXE - D:\Program Files (x86)\Aurora\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhggankplfegmjjngfmhfajedmiikolo [2014-09-20]
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko [2014-09-20]
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnoffddplpippgcfjdhbmhkofpnaalpg [2014-10-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [khnjmagdblgbcncfepcaceilfekckalj] - C:\Program Files\Web Security\websecurity.crx [2014-09-30]
CHR HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Nuzoo\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-09-30]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
S4 AppleOSSMgr; C:\Windows\system32\AppleOSSMgr.exe [194432 2011-06-29] ()
S4 AppleTimeSrv; C:\Windows\system32\AppleTimeSrv.exe [100224 2011-06-29] (Apple Inc.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S4 backupsvc5; K:\BackupSOFT\backupsvc5.exe [1198080 2014-11-10] (Digital Dynamic) [File not signed]
R2 MbaeSvc; C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe [544056 2014-12-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
S4 NitroReaderDriverReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [196624 2013-07-26] (Nitro PDF Software)
R2 uvnc_service; C:\Program Files\uvnc bvba\UltraVNC\WinVNC.exe [1795864 2014-10-01] (UltraVNC)
S4 orgaMAXMobileService; "k:\orgaMAX\orgamaxmobil_service.exe" s [X]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S3 systemcmd; cmd /k start [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwf.sys [12800 2009-03-06] ()
R0 AppleHFS; C:\Windows\system32\Drivers\AppleHFS.sys [49664 2011-06-13] (Apple Inc.) [File not signed]
R0 AppleMNT; C:\Windows\system32\Drivers\AppleMNT.sys [6784 2011-06-13] (Apple Inc.) [File not signed]
S3 BthKicker; C:\Windows\System32\DRIVERS\BthKicker.sys [7424 2011-02-07] (Apple Inc.)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2014-12-02] (Phoenix Technologies) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-12-07] (Disc Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15384 2014-01-07] ()
R1 ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\mbae.sys [47928 2014-12-04] ()
R3 IRRemoteFlt; C:\Windows\System32\DRIVERS\IRFilter.sys [16512 2011-02-07] (Apple Inc.)
R2 KeyAgent; C:\Windows\system32\drivers\KeyAgent.sys [6528 2011-06-15] (Apple Inc.) [File not signed]
R2 MacHALDriver; C:\Windows\system32\drivers\MacHALDriver.sys [12928 2011-03-25] (Apple Inc.) [File not signed]
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [75480 2014-11-21] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 netmon_wfp; C:\Windows\System32\drivers\netmon_wfp.sys [44248 2014-08-25] (Windows (R) Win 7 DDK provider)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R1 pefndis; C:\Windows\System32\DRIVERS\pefndis.sys [51888 2013-09-23] (Microsoft Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [347136 2009-07-13] (Realtek Semiconductor Corporation                           )
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
S3 wfpcapture; C:\Windows\System32\Drivers\wfpcapture.sys [56496 2013-09-23] (Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\System32\drivers\WsAudioDevice_383.sys [25632 2014-07-31] (Wondershare)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 cpuz138; \??\C:\Users\Nuzoo\AppData\Local\Temp\cpuz138\cpuz138_x32.sys [X]
U5 UnlockerDriver5; K:\Programme\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieUserList
2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieSiteList
2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieBrowserModeList
2014-12-07 10:58 - 2014-12-07 11:41 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit
2014-12-07 10:58 - 2014-12-07 10:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2014-12-07 10:58 - 2014-12-07 10:58 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit
2014-12-07 09:20 - 2007-02-12 13:36 - 00277784 _____ (Intel Corporation) C:\Windows\system32\Drivers\iastor.sys
2014-12-07 06:09 - 2014-12-07 06:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DB Browser for SQLite
2014-12-07 03:59 - 2014-12-07 04:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\DAEMON Tools Lite
2014-12-07 03:59 - 2014-12-07 03:59 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-12-07 03:52 - 2014-12-07 03:52 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\MetaGeek,_LLC
2014-12-07 03:49 - 2014-12-07 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 11
2014-12-07 03:48 - 2014-12-07 03:51 - 00000000 ____D () C:\Program Files\ABBYY FineReader 11
2014-12-07 03:48 - 2014-12-07 03:48 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\ABBYY
2014-12-07 03:48 - 2014-12-07 03:48 - 00000000 ____D () C:\ProgramData\ABBYY
2014-12-07 01:20 - 2014-12-07 01:20 - 00000000 ____D () C:\tEST
2014-12-07 00:26 - 2014-12-07 00:26 - 00014088 _____ (Sysinternals - www.sysinternals.com) C:\Windows\system32\Drivers\PROCEXP141.SYS
2014-12-07 00:02 - 2014-12-07 00:02 - 00000000 ____D () C:\Program Files\zebNet
2014-12-06 16:27 - 2014-12-06 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2014-12-06 16:27 - 2014-12-06 16:27 - 00000000 ____D () C:\Program Files\Intel Driver Update Utility
2014-12-06 15:54 - 2014-12-08 21:56 - 00000000 ____D () C:\FRST
2014-12-05 06:28 - 2014-12-07 02:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-12-05 06:28 - 2014-12-06 15:32 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-05 06:27 - 2014-10-27 12:10 - 00018200 _____ () C:\Windows\system32\roboot.exe
2014-12-05 06:27 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-12-05 06:26 - 2014-12-05 06:26 - 00000873 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\zebNet® User Account Hider.lnk
2014-12-05 05:50 - 2014-12-05 05:50 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Nitro
2014-12-05 04:14 - 2014-12-05 04:14 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Corel
2014-12-05 04:01 - 2014-12-05 04:01 - 00090232 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-05 03:56 - 2014-12-05 03:57 - 00000000 ____D () C:\Users\Gast
2014-12-05 03:56 - 2014-12-05 03:56 - 00001425 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-05 03:56 - 2014-12-05 03:56 - 00000020 ___SH () C:\Users\Gast\ntuser.ini
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 ____D () C:\Users\Gast\AppData\Local\VirtualStore
2014-12-05 03:56 - 2014-11-03 20:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-12-05 03:56 - 2014-09-22 02:01 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-12-05 03:56 - 2014-09-13 03:54 - 00002086 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-12-05 03:56 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-05 03:56 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-05 00:21 - 2014-12-07 00:37 - 00324096 ___SH () C:\Users\Nuzoo\Thumbs.db
2014-12-05 00:01 - 2014-12-05 00:01 - 00000000 ____D () C:\dell
2014-12-04 21:09 - 2014-12-04 21:09 - 00000000 ____D () C:\Program Files\Web Security
2014-12-03 02:40 - 2014-12-03 02:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2014-12-03 02:40 - 2014-12-03 02:40 - 00000000 ____D () C:\Program Files\WinPcap
2014-12-03 02:08 - 2014-12-06 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PCI-PCI Express Configuration Utility
2014-12-03 02:08 - 2014-12-03 07:44 - 00000000 ____D () C:\Program Files\Intel PCI-PCI Express Configuration Utility
2014-12-03 02:08 - 2006-03-12 18:29 - 00257619 _____ () C:\Windows\pciesnoop.HLP
2014-12-03 02:08 - 2006-01-05 17:10 - 00000359 _____ () C:\Windows\pciesnoop.CNT
2014-12-03 00:36 - 2014-12-03 00:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2014-12-03 00:36 - 2014-12-03 00:36 - 00000000 ____D () C:\Program Files\Elaborate Bytes
2014-12-03 00:01 - 2014-12-03 00:01 - 00000000 ____D () C:\ProgramData\IntelDLM
2014-12-03 00:00 - 2014-12-03 00:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Intel
2014-12-02 23:54 - 2014-12-02 23:54 - 00000000 ____D () C:\Users\Nuzoo\Intel
2014-12-02 23:36 - 2014-12-02 23:36 - 00023456 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys
2014-12-02 23:34 - 2014-12-02 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-12-02 21:44 - 2014-12-02 21:44 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Apps\2.0
2014-12-02 19:20 - 2014-12-02 19:56 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\KeePass
2014-11-28 04:41 - 2014-11-28 04:41 - 00090232 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-28 04:40 - 2014-12-03 07:48 - 00000000 ____D () C:\Users\Administrator
2014-11-28 04:40 - 2014-11-28 04:41 - 00000160 ___SH () C:\Users\Administrator\ntuser.ini
2014-11-28 04:40 - 2014-11-28 04:40 - 00001425 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-11-28 04:40 - 2014-11-03 20:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-28 04:40 - 2014-09-22 02:01 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-11-28 04:40 - 2014-09-13 03:54 - 00002086 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-11-28 04:40 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-28 04:40 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-28 00:09 - 2014-11-28 01:35 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Mindjet
2014-11-27 23:51 - 2014-11-27 23:51 - 00002886 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Mindjet MindManager 14.lnk
2014-11-27 23:51 - 2014-11-27 23:51 - 00000000 ____D () C:\ProgramData\Mindjet
2014-11-27 23:51 - 2014-11-27 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mindjet MindManager 14
2014-11-26 06:30 - 2014-11-26 06:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSSL
2014-11-26 06:30 - 2014-11-26 06:47 - 00000000 ____D () C:\OpenSSL-Win32
2014-11-26 06:30 - 2014-10-15 07:36 - 01179648 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libeay32.dll
2014-11-26 06:30 - 2014-10-15 07:36 - 00273920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\ssleay32.dll
2014-11-26 06:30 - 2014-10-15 07:36 - 00273920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libssl32.dll
2014-11-25 05:49 - 2014-11-25 05:49 - 00051862 _____ () C:\Windows\system32\energy-report.html
2014-11-25 00:45 - 2014-11-25 00:45 - 00002125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-11-25 00:45 - 2014-11-25 00:45 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-11-24 07:07 - 2014-11-24 07:07 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Console
2014-11-24 03:02 - 2014-11-24 03:02 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AusweisApp2
2014-11-23 20:27 - 2014-12-01 05:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-23 20:27 - 2014-11-23 20:27 - 00000000 ____D () C:\ProgramData\Avira
2014-11-23 20:27 - 2014-11-23 20:27 - 00000000 ____D () C:\Program Files\Avira
2014-11-23 19:38 - 2014-11-23 19:39 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\ApexDC++
2014-11-23 19:38 - 2014-11-23 19:38 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\ApexDC++
2014-11-23 18:42 - 2014-12-06 16:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-23 18:42 - 2014-11-23 18:42 - 00000000 ____D () C:\Program Files\Uniblue
2014-11-23 18:40 - 2014-11-23 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ApexDC++ - The Pinnacle of File-Sharing
2014-11-22 22:10 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-22 22:10 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-22 22:05 - 2014-11-22 22:05 - 00015786 _____ () C:\Windows\system32\results.xml
2014-11-22 21:31 - 2014-12-04 23:57 - 00002057 _____ () C:\Windows\epplauncher.mif
2014-11-22 16:34 - 2014-12-05 07:33 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Malwarebytes
2014-11-22 16:28 - 2014-11-22 16:35 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-11-22 16:02 - 2014-11-22 16:14 - 00000000 ____D () C:\ProgramData\Ralink
2014-11-22 16:00 - 2014-11-22 16:00 - 00000000 ____D () C:\ProgramData\Edimax Driver
2014-11-22 16:00 - 2014-11-22 16:00 - 00000000 ____D () C:\Program Files\Edimax
2014-11-21 16:02 - 2014-11-21 16:02 - 00000000 ____D () C:\ProgramData\Mediatek
2014-11-20 06:41 - 2014-11-20 06:41 - 00000000 ____D () C:\ProgramData\Mediatek Driver
2014-11-20 06:41 - 2014-11-20 06:41 - 00000000 ____D () C:\Program Files\Cisco
2014-11-20 05:33 - 2014-11-22 16:38 - 00000000 ____D () C:\Program Files\EnterDigital
2014-11-19 21:23 - 2014-11-19 21:23 - 00000000 ____D () C:\Windows\system32\Lang
2014-11-19 21:13 - 2014-12-07 08:03 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\WinDNSdynamic
2014-11-19 20:36 - 2014-11-19 20:36 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\InstallShield
2014-11-17 23:03 - 2014-11-22 21:55 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\InetStat
2014-11-17 20:53 - 2014-12-07 10:34 - 00000836 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-17 00:19 - 2014-11-17 19:05 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-11-16 20:44 - 2014-11-22 18:37 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\GetPrivate
2014-11-16 19:47 - 2014-11-17 02:30 - 00000304 _____ () C:\Windows\Tasks\At1.job
2014-11-16 06:17 - 2013-09-30 16:26 - 02881848 _____ () C:\Windows\system32\pwNative.exe
2014-11-16 06:17 - 2013-09-30 16:26 - 00015688 ____N () C:\Windows\system32\pwdrvio.sys
2014-11-16 06:17 - 2013-09-30 16:26 - 00010320 ____N () C:\Windows\system32\pwdspio.sys
2014-11-16 06:16 - 2014-11-16 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Home Edition 8.1.1
2014-11-16 05:43 - 2014-11-16 05:43 - 00000000 ____D () C:\Users\Nuzoo\firefox
2014-11-13 23:06 - 2014-11-13 23:06 - 00000000 ____D () C:\Program Files\Corel
2014-11-13 22:54 - 2014-11-13 22:55 - 00000000 ____D () C:\Program Files\GUMBACC.tmp
2014-11-12 08:46 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:46 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:45 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:45 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:45 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:45 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:45 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:45 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:45 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:45 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:45 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:45 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:45 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:45 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:45 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:45 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:45 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:45 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:45 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:45 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:45 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:45 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:45 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:45 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:45 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:45 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:45 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:45 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:45 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:45 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:45 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:45 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:45 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:45 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:45 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:45 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:45 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:45 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:45 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:45 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:45 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:45 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:45 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:45 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:45 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:45 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 01:20 - 2014-12-02 21:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Nitro PDF
2014-11-10 23:50 - 2014-11-10 23:50 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Digital Dynamic
2014-11-10 23:19 - 2014-12-01 00:15 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00002487 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\ProgramData\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\Program Files\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2014-11-10 23:19 - 2013-07-26 06:48 - 00027152 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll
2014-11-10 23:19 - 2013-07-26 06:48 - 00018448 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll
2014-11-10 23:18 - 2014-11-10 23:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Downloaded Installations

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 21:24 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-08 21:22 - 2014-09-29 03:52 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\uTorrent
2014-12-08 21:01 - 2014-09-01 02:00 - 01811736 _____ () C:\Windows\WindowsUpdate.log
2014-12-08 20:59 - 2014-09-07 19:42 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-08 20:58 - 2014-10-13 14:15 - 00002896 _____ () C:\Users\Nuzoo\ipconfig.all.txt
2014-12-08 20:08 - 2014-10-10 00:14 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Spotify
2014-12-08 19:58 - 2009-07-14 05:34 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-08 19:58 - 2009-07-14 05:34 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-08 19:53 - 2014-09-11 18:44 - 00090232 _____ () C:\Users\Nuzoo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-08 17:03 - 2014-09-19 09:36 - 00001686 _____ () C:\Windows\Tasks\LZKKBIVA.job
2014-12-08 05:10 - 2010-11-20 22:01 - 01745368 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-07 22:59 - 2014-09-07 19:42 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-07 22:05 - 2014-10-10 00:15 - 00001796 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-12-07 22:01 - 2014-10-10 00:15 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Spotify
2014-12-07 18:59 - 2014-09-06 13:20 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-12-07 18:59 - 2010-11-20 22:48 - 01225368 _____ () C:\Windows\PFRO.log
2014-12-07 18:59 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-07 18:59 - 2009-07-14 05:39 - 00009719 _____ () C:\Windows\setupact.log
2014-12-07 10:47 - 2014-09-19 10:52 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-07 08:25 - 2014-09-01 07:29 - 00000000 ____D () C:\Users\Nuzoo
2014-12-07 08:13 - 2009-10-01 15:21 - 00006976 _____ () C:\Users\Nuzoo\AHCI_Trick_23.reg
2014-12-07 06:51 - 2014-09-05 01:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\vlc
2014-12-07 06:15 - 2014-09-17 23:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-12-07 03:59 - 2014-09-02 01:20 - 00223538 _____ () C:\Windows\DPINST.LOG
2014-12-07 03:59 - 2013-11-23 14:01 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-12-07 03:11 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2014-12-07 00:02 - 2014-10-12 14:40 - 00001208 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\zebNet® Windows Keyfinder.lnk
2014-12-07 00:02 - 2014-10-12 14:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-12-05 07:33 - 2014-09-15 21:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-05 04:20 - 2013-02-19 03:34 - 00000295 ___SH () C:\boot.ini
2014-12-03 07:44 - 2014-10-21 11:45 - 00000000 ____D () C:\Users\admin
2014-12-03 07:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-12-03 07:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-12-03 07:36 - 2014-09-02 01:04 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-03 01:20 - 2014-09-27 22:07 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:14 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-01 05:01 - 2014-10-16 02:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows OPK
2014-12-01 05:01 - 2014-10-16 01:58 - 00000000 ____D () C:\Program Files\Windows Imaging
2014-12-01 04:15 - 2014-09-01 08:29 - 00000000 ____D () C:\ProgramData\Samsung
2014-12-01 04:11 - 2014-09-06 22:42 - 00000000 ____D () C:\Temp
2014-11-28 05:42 - 2014-09-27 02:51 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-28 04:44 - 2009-07-14 05:33 - 00385488 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-28 04:40 - 2014-10-08 08:08 - 00001066 _____ () C:\Users\Nuzoo\2.txt
2014-11-26 20:39 - 2014-09-01 08:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Mozilla
2014-11-26 20:39 - 2014-09-01 08:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Mozilla
2014-11-26 19:35 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2014-11-25 07:28 - 2014-09-26 05:59 - 00007630 _____ () C:\Users\Nuzoo\AppData\Local\resmon.resmoncfg
2014-11-24 07:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-11-23 21:13 - 2014-09-02 01:41 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-22 22:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Web
2014-11-22 18:37 - 2014-09-20 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X6
2014-11-22 18:37 - 2014-09-15 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiveSupport
2014-11-22 18:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spool
2014-11-22 18:33 - 2014-10-13 13:49 - 00000000 ____D () C:\Program Files\MediatekWiFi
2014-11-22 18:33 - 2014-09-20 23:40 - 00000000 ____D () C:\ProgramData\Corel
2014-11-22 18:33 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-21 06:14 - 2014-09-19 10:51 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-09-19 10:51 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-09-19 10:51 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-18 14:39 - 2014-10-21 12:27 - 00002315 _____ () C:\Windows\comsetup.log
2014-11-18 03:54 - 2014-10-19 08:56 - 00000792 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-18 03:54 - 2014-09-21 21:53 - 00000812 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aurora.lnk
2014-11-18 03:54 - 2014-09-15 16:34 - 00002258 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-11-18 03:54 - 2014-09-01 07:30 - 00001417 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-17 00:19 - 2009-07-14 03:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-16 22:23 - 2014-10-31 09:47 - 00000000 ____D () C:\Windows\system32\Logfiles
2014-11-16 22:23 - 2014-10-31 00:34 - 00000000 ____D () C:\Windows\system32\LogFiles - Kopie
2014-11-16 07:53 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-11-16 04:25 - 2014-09-14 01:29 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Windows Live Writer
2014-11-13 03:25 - 2014-09-01 18:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 03:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-13 03:06 - 2014-09-01 10:26 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 03:02 - 2014-09-01 10:25 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-08 23:20 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports

Files to move or delete:
====================
C:\Users\Nuzoo\AHCI_Trick_23.reg
C:\Windows\Tasks\At1.job


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-18 09:15

==================== End Of Log ============================
         

Hier das »Additional scan result«:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-12-2014 02
Ran by Nuzoo at 2014-12-08 21:58:19
Running from C:\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\uTorrent) (Version: 3.4.2.36802 - BitTorrent Inc.)
7-Zip 9.22beta (HKLM\...\7-Zip) (Version:  - )
ABBYY FineReader 11 (HKLM\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)
Active@ ISO Burner 3.0 (HKLM\...\{3B756F35-2504-429A-B36C-EA0961B6A2C0}_is1) (Version: 3.0 - LSoft Technologies Inc)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Advanced Backup Manager 4.1.14168.385 (HKLM\...\Advanced Backup Manager) (Version: 4.1.14168.385 - Digital Dynamic)
ApexDC++ 1.5.13 (HKLM\...\{43D1A6DC-F2D3-4EBC-8851-CC8B9C0C8763}_is1) (Version: 1.5.13 - ApexDC++ Development Team)
AusweisApp2 (HKLM\...\{EEFEEC05-7E91-4450-80C9-678B0C8D5525}) (Version: 1.0.1 - Governikus GmbH & Co. KG)
Avira (HKLM\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Boot Camp-Dienste (HKLM\...\{E8F8AF38-7FFA-407A-8E4B-4722AE20FA30}) (Version: 4.0.4033 - Apple Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{B92076C0-C5FE-4DB1-AA8D-855430CDF098}) (Version: 16.0.0.707 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 16.0.707 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Capture (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Common (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Connect (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Custom Data (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Draw (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - EN (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Filters (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - FontNav (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - IPM (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - PHOTO-PAINT (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Photozoom Plugin (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Redist (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Setup Files (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VBA (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VideoBrowser (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VSTA (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Writing Tools (Version: 16.0 -  Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 (HKLM\...\_{511DE7EA-AA68-4D7A-A2E3-0E7B5186B822}) (Version: 16.0.0.707 - Corel Corporation)
CorelDRAW Graphics Suite X6 (Version: 16.0 - Corel Corporation) Hidden
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DB Browser for SQLite (HKLM\...\SqliteBrowser3) (Version: 3.4.0 - oldsch00l)
EaseUS Data Recovery Wizard 7.5 (HKLM\...\EaseUS Data Recovery Wizard 7.5_is1) (Version:  - EaseUS)
Firefox Developer Edition 36.0a2 (x86 de) (HKLM\...\Firefox Developer Edition 36.0a2 (x86 de)) (Version: 36.0a2 - Mozilla)
Fotogalerie (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FreeCAD 0.14 - A free open source CAD system (HKLM\...\FreeCAD 0.14) (Version: 0.14.3700 - Juergen Riegel)
GAEB-Konverter Version 8 (HKLM\...\{206E4E2F-69FF-4EA9-AFE5-DAF95D664E1E}) (Version: 8.1.0 - T&&T Datentechnik GmbH)
GnuWin32: sed-4.2.1 (HKLM\...\sed-4.2.1_is1) (Version: 4.2.1 - GnuWin)
GnuWin32: Wget-1.11.4-1 (HKLM\...\Wget-1.11.4-1_is1) (Version: 1.11.4-1 - GnuWin32)
Google Books Downloader version 2.3 (HKLM\...\{216729B6-014A-F413-814F-F17F74FBA113}_is1) (Version: 2.3 - GBOOKSDOWNLOADER.COM)
Google Drive (HKLM\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.5927.2 - IDT)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel PCI/PCI Express Configuration Utility 1.0 (HKLM\...\Intel PCI/PCI Express Configuration Utility_is1) (Version:  - Intel)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel® Driver Update Utility (HKLM\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LibreCAD (HKLM\...\LibreCAD) (Version: 2.0.5 - LibreCAD Team)
Malwarebytes Anti-Exploit version 1.05.1.1015 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.05.1.1015 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Message Analyzer (HKLM\...\{89A87FF1-607C-4551-B363-DDFA2719067E}) (Version: 4.0.6396.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Mindjet MindManager 14 (HKLM\...\{D31BB790-206A-40FF-8F27-F6030B2FB175}) (Version: 14.3.192 - Mindjet)
MiniTool Partition Wizard Home Edition 8.1.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 33.0 (x86 de) (HKLM\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MusicBrainz Picard (HKLM\...\MusicBrainz Picard) (Version: 1.2 - MusicBrainz)
Nitro Reader 3 (HKLM\...\{F5451D00-B448-4E9A-82DC-1929F4F1910D}) (Version: 3.5.6.5 - Nitro)
OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OpenSSL 1.0.1j (32-bit) (HKLM\...\OpenSSL (32-bit)_is1) (Version:  - OpenSSL Win32 Installer Team)
orgaMAX Business Software (HKLM\...\orgaMAX_is1) (Version: 14.0 - deltra Business Software)
Photo Common (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5936 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Spotify (HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
SpyHunter (HKLM\...\{455F074C-814E-4520-B69B-5584BD90400C}) (Version: 4.17.6.4336 - Enigma Software Group USA, LLC)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.0.3 - uvnc bvba)
USB/DVD-Downloadtool für Windows 7 (HKLM\...\{7D6DDE45-FE2F-4D11-A7E7-BC2C2910536C}) (Version: 1.0.30 - Microsoft Corporation)
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Web Security (HKLM\...\Web Security) (Version:  - )
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows OEM Preinstallation Kit (HKLM\...\{266CCC48-9AA1-404E-A1CB-558E8CC46F69}) (Version: 2.0.0.0 - Microsoft Corporation)
Windows-Treiberpaket - Apple Inc. (AppleUSBEthernet) Net  (02/01/2008 3.8.3.10) (HKLM\...\07170A155D5587C8782EABA10E94E4127A86F6E4) (Version: 02/01/2008 3.8.3.10 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Bluetooth Enabler (06/27/2007 2.0.0.1) (HKLM\...\5F8BE32FAE3D6BC77B512F7B0624D7B6C8A26EFB) (Version: 06/27/2007 2.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Broadcom Bluetooth (10/05/2010 3.2.0.1) (HKLM\...\A6FE31FDFB79BAF53F0D80728677EBE7FB6581BE) (Version: 10/05/2010 3.2.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Broadcom Bluetooth (11/28/2011 4.0.3.0) (HKLM\...\1EF1377CD9F4997E7FE402BE6AD4FD98B35B0D7E) (Version: 11/28/2011 4.0.3.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Built-in iSight (10/25/2007 2.0.1.0) (HKLM\...\9324ED54E32F5399037F87E076CA01C6CEB92830) (Version: 10/25/2007 2.0.1.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Display (01/23/2009 3.0.0.0) (HKLM\...\C5CE3BA75A23622D2140C5D5D0998C07DDC4CF1C) (Version: 01/23/2009 3.0.0.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple IR Receiver (02/21/2008 2.0.4.0) (HKLM\...\4D00971668041EDAD7097C5827D1739F03B9E5D7) (Version: 02/21/2008 2.0.4.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Keyboard (05/05/2011 4.0.0.1) (HKLM\...\4B114013DDC5858DB929CE55F363AB88CDE1F78C) (Version: 05/05/2011 4.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Keyboard (11/04/2011 4.0.1.0) (HKLM\...\F51CDF2FE360EE8922D23DD389F1E45F264A362F) (Version: 11/04/2011 4.0.1.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Multitouch (05/05/2011 4.0.0.1) (HKLM\...\44E2556E81BCB991055DD976642491906DD3B8A0) (Version: 05/05/2011 4.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Multitouch Mouse (05/05/2011 4.0.0.1) (HKLM\...\B9491C5C199D7236FCDCB76367922461FADC80C7) (Version: 05/05/2011 4.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple ODD (05/17/2010 3.1.0.0) (HKLM\...\2E2B6DCC02509BB8D2629A009DE8B5C3055B6779) (Version: 05/17/2010 3.1.0.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple System Device (04/05/2011 3.2.0.8) (HKLM\...\F46F6C2CF86ECDFF2CE25B508923B04E2F23F1CE) (Version: 04/05/2011 3.2.0.8 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple System Device (10/07/2011 4.0.1.0) (HKLM\...\AC0B2BFCEC6CF3AB2E8D1849243A85A1051BEB1C) (Version: 10/07/2011 4.0.1.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Trackpad (07/13/2009 3.0.0.1) (HKLM\...\A0DAD483951AB3046050D68A2A1D8CEB4A7C61EE) (Version: 07/13/2009 3.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Trackpad Enabler (07/13/2009 3.0.0.1) (HKLM\...\111E266FDD1556398EFC13BE47678F96E8497682) (Version: 07/13/2009 3.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Wireless Mouse (06/01/2011 4.0.0.1) (HKLM\...\20CF1F4786CB13A83CD2EC358929609A9B7A205C) (Version: 06/01/2011 4.0.0.1 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Apple Wireless Trackpad (01/17/2011 3.2.0.0) (HKLM\...\7E77301EAEB38AFBF074A5EEACED05B618975B6C) (Version: 01/17/2011 3.2.0.0 - Apple Inc.)
Windows-Treiberpaket - Apple Inc. Bluetooth  (03/01/2010 3.0.0.5) (HKLM\...\31BC243044B2C02B454ECDA8F5B44427F3754DD0) (Version: 03/01/2010 3.0.0.5 - Apple Inc.)
Windows-Treiberpaket - Atheros Communications Inc. (athr) Net  (11/13/2010 9.2.0.113) (HKLM\...\4A92273B670E1AF46863F93542352C780755E201) (Version: 11/13/2010 9.2.0.113 - Atheros Communications Inc.)
Windows-Treiberpaket - Broadcom (b57nd60x) Net  (10/19/2011 15.0.0.21) (HKLM\...\8102E37FF0B8F537D2AD89B3C0662D0FD14C38C6) (Version: 10/19/2011 15.0.0.21 - Broadcom)
Windows-Treiberpaket - Broadcom (BCM43XX) Net  (02/03/2012 5.106.198.4) (HKLM\...\EEC146B6FEECE1DCAED130CE5A397F3018E73841) (Version: 02/03/2012 5.106.198.4 - Broadcom)
Windows-Treiberpaket - Broadcom Corporation (bScsiSDx) SDHost  (11/29/2011 1.0.0.232) (HKLM\...\9BC90BC33C5BF8740D3FD6AF9C83B15D1D2EEB86) (Version: 11/29/2011 1.0.0.232 - Broadcom Corporation)
Windows-Treiberpaket - Cirrus Logic, Inc. (CirrusFilter) MEDIA  (01/30/2012 6.6001.1.36) (HKLM\...\FF8B5F3FD21FE7703C294F36CF12825927AB70B0) (Version: 01/30/2012 6.6001.1.36 - Cirrus Logic, Inc.)
Windows-Treiberpaket - Intel (e1express) Net  (03/26/2010 9.13.41.0) (HKLM\...\9646DB3A0BD532DCF0A6750140F84D0089FF608E) (Version: 03/26/2010 9.13.41.0 - Intel)
Windows-Treiberpaket - Intel (e1kexpress) Net  (04/12/2010 11.6.92.0) (HKLM\...\D885E9963D372B22E9F3CD04F0AF501F1FCCF220) (Version: 04/12/2010 11.6.92.0 - Intel)
Windows-Treiberpaket - Intel (e1qexpress) Net  (12/04/2009 11.4.7.0) (HKLM\...\BCFD182AEFFCC167E74298C1563F0C84CEE4D92C) (Version: 12/04/2009 11.4.7.0 - Intel)
Windows-Treiberpaket - Intel (e1rexpress) Net  (01/07/2010 11.4.16.0) (HKLM\...\8BB769A00E5FB4E3C5C45B4B60C20B4322C430BD) (Version: 01/07/2010 11.4.16.0 - Intel)
Windows-Treiberpaket - Intel (e1yexpress) Net  (04/07/2010 10.1.9.0) (HKLM\...\157C5C3D3E97D5439AD0C6268A489EF68FB7AD4F) (Version: 04/07/2010 10.1.9.0 - Intel)
Windows-Treiberpaket - Intel System  (07/20/2007 1.2.76.0) (HKLM\...\82BE89CA9B7493FA05D2D4D32B415CF07EA08B47) (Version: 07/20/2007 1.2.76.0 - Intel)
Windows-Treiberpaket - Marvell (yukonwlh) Net  (03/23/2007 10.12.7.3) (HKLM\...\1D68F7A8B8397256B162B831457A6775BD17F3F4) (Version: 03/23/2007 10.12.7.3 - Marvell)
WinFuture xp-Iso-Builder 3.0.8 (HKLM\...\WinFuture xp-Iso-Builder 3_is1) (Version:  - Tobias Schiek)
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wondershare Streaming Audio Recorder(Build 2.2.1) (HKLM\...\Wondershare Streaming Audio Recorder_is1) (Version: 2.2.1.2 - Wondershare Software)
Yahoo Community Smartbar (HKLM\...\{4E732E5D-E577-451A-9BB1-CBE64A2CBC2F}) (Version: 11.112.66.19229 - Linkury Inc.) <==== ATTENTION
zebNet® User Account Hider 2.0.0.0 (HKLM\...\{76ABEE19-6502-486B-8E3A-4A8525FF5110}) (Version: 2.0.0.0 - zebNet® Ltd)
zebNet® Windows Keyfinder 5.0.1.3 (HKLM\...\{1A3C22F2-D546-4EC0-927E-EFAEDAC18C52}) (Version: 5.0.1.3 - zebNet® Ltd)
zebNet® Windows Keyfinder 6.0.0.0 (HKLM\...\{BA76A2F4-88E2-4232-BAB9-DA12DDFD03CC}) (Version: 6.0.0.0 - zebNet® Ltd)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Nuzoo\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll No File
CustomCLSID: HKU\S-1-5-21-189806087-158390553-3371217362-1006_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\admin\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\FileSyncApi.dll No File

==================== Restore Points  =========================

02-12-2014 17:01:16 sich
02-12-2014 22:58:21 Intel® Driver Update Utility
02-12-2014 23:37:33 Gerätetreiber-Paketinstallation: Elaborate Bytes AG Speichercontroller
03-12-2014 00:51:54 Intel® Driver Update Utility
03-12-2014 02:59:55 Microsoft Antimalware Checkpoint
03-12-2014 03:25:01 ahci
03-12-2014 03:30:24 Windows Update
03-12-2014 03:39:16 Intel® Driver Update Utility
03-12-2014 04:10:25 Installiert Mediatek Wireless LAN
04-12-2014 16:24:50 Windows Update
06-12-2014 15:05:44 Avira PC Cleaner - 06.12.2014 16:05
06-12-2014 15:27:06 Intel® Driver Update Utility
07-12-2014 02:43:32 Installed MSXML 6.0 Parser
07-12-2014 02:45:09 Installed ABBYY FineReader 11.
07-12-2014 02:59:50 Gerätetreiber-Paketinstallation: DT Soft Ltd Systemgeräte
08-12-2014 00:33:10 Windows Update
08-12-2014 19:26:19 downgade

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2014-11-08 13:24 - 00000906 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {071794BB-7D20-4A1E-9B62-16CFF0E0FD3F} - System32\Tasks\APSnotifierPP3 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {0791BFE0-9D47-4F1C-BC9E-022DE75AB713} - System32\Tasks\{F67BFB36-FE9F-4E5C-9B11-67C42EFC268E} => K:\Downloads\iata57_enu.exe [2014-12-03] (Intel Corporation)
Task: {094F87DA-30C8-4977-ABA9-3794C9FFDF7B} - System32\Tasks\{0B4F645E-A6D5-4789-B7D1-319AE03B3110} => K:\Downloads\iata57_enu.exe [2014-12-03] (Intel Corporation)
Task: {23AC2514-7D21-45C0-8F08-4B515C82ABBF} - System32\Tasks\Games\UpdateCheck_S-1-5-21-189806087-158390553-3371217362-1000
Task: {248B891B-CB38-4C2E-8B00-E6A74F4FB4A4} - System32\Tasks\APSnotifierPP1 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {30E88929-A507-470D-9C56-90DCF928D2F8} - System32\Tasks\CMD => “CMD”
Task: {3AC3E6D6-9A3E-49AB-AE3B-34328A207353} - \ASP No Task File <==== ATTENTION
Task: {3E545C6C-2051-489C-939B-9C7AF754BC32} - System32\Tasks\{D3F8CAF4-7A4C-42E6-B692-24F30AEE0476} => K:\Downloads\FZ19_XP_DRIVERS\Drivers\2 Chipset Driver\Setup.exe [2007-08-08] (Intel® Corporation)
Task: {403B4208-620A-45CE-92FA-77B3166159FF} - System32\Tasks\{D08F3924-122E-4199-9984-1C143A5FD9A8} => K:\Downloads\iata57_enu.exe [2014-12-03] (Intel Corporation)
Task: {42214E32-02F8-4C58-8850-D11458F0590F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-07] (Google Inc.)
Task: {53F5DBE2-CEC9-4F90-8ED5-6A17BA08484C} - System32\Tasks\LZKKBIVA => C:\Users\Nuzoo\AppData\Roaming\LZKKBIVA.exe <==== ATTENTION
Task: {79375785-283E-496F-AAF9-2CAE19889E2D} - System32\Tasks\Process Explorer-Orbit-Nuzoo => K:\DOWNLOADS\PROCEXP.EXE [2014-05-17] (Sysinternals - www.sysinternals.com)
Task: {874F6E51-FE6E-47C5-9DFE-3DDFF4A4C631} - System32\Tasks\At1 => cmd.exe  <==== ATTENTION
Task: {8F131CFE-5B4B-4B7E-BF88-741F7B55AF57} - System32\Tasks\{416CC33C-0350-43FB-A6FE-DE14BE0A670C} => msiexec.exe /package "C:\Desktop\MicrosoftFixit50562(1).msi"
Task: {AB755949-1BD5-469F-ABF2-E243DA3F7E0D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-07] (Google Inc.)
Task: {B791281C-0684-4A21-ADFB-6EACDF08842F} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {BDC13A21-EB46-4454-A0BF-5E5FCCCC77E0} - System32\Tasks\APSnotifierPP2 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {DA563DEB-B111-49CA-ADBB-179F5C821D2B} - \RegClean Pro No Task File <==== ATTENTION
Task: {E891411B-92DC-4F68-A838-33B5E37DAECC} - \Advanced-System Protector_startup No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\At1.job => 

ˆH¬¢ÚDIµo&ïÆÿjáFº<
 sä!Þ1´cmd.exeSYSTEM Erstellt von NetScheduleJobAdd.
0Þ1$éâ


éõ�ò¦éæç�áÄ—²ÊC¼¸þ|ê	ú±‰d”;�ÂÿÌ{GÖnÈcÆÙ°Df`©¤°LtøšÊÇ`0c5GýŸ
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LZKKBIVA.job => C:\Users\Nuzoo\AppData\Roaming\LZKKBIVA.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-12-07 19:02 - 2014-12-07 19:02 - 00098816 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32api.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00110080 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\pywintypes27.dll
2014-12-07 19:02 - 2014-12-07 19:02 - 00364544 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\pythoncom27.dll
2014-12-07 19:02 - 2014-12-07 19:02 - 00045568 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_socket.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 01160704 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_ssl.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00320512 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32com.shell.shell.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00713216 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_hashlib.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 01175040 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._core_.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00805888 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._gdi_.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00811008 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._windows_.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 01062400 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._controls_.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00735232 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._misc_.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00128512 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_elementtree.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00127488 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\pyexpat.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00557056 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\pysqlite2._sqlite.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00087552 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_ctypes.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00119808 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32file.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00108544 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32security.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00007168 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\hashobjs_ext.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00167936 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32gui.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00018432 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32event.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00038912 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32inet.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00011264 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32crypt.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00070656 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._html2.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00027136 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\_multiprocessing.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00035840 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32process.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00686080 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\unicodedata.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00122368 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._wizard.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00024064 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32pipe.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00025600 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32pdh.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00525640 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\windows._lib_cacheinvalidation.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00010240 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\select.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00017408 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32profile.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00022528 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\win32ts.pyd
2014-12-07 19:02 - 2014-12-07 19:02 - 00078336 _____ () C:\Users\Nuzoo\AppData\Local\Temp\_MEI3602\wx._animate.pyd
2014-08-13 08:27 - 2014-08-13 08:27 - 00988160 _____ () k:\Program Files\OpenOffice 4\program\libxml2.dll
2014-07-29 12:34 - 2014-07-29 12:34 - 00170496 _____ () k:\Program Files\OpenOffice 4\program\libxslt.dll
2014-07-29 12:34 - 2014-07-29 12:34 - 00136192 _____ () k:\Program Files\OpenOffice 4\program\libxmlsec-mscrypto.dll
2014-07-29 12:34 - 2014-07-29 12:34 - 00303616 _____ () k:\Program Files\OpenOffice 4\program\libxmlsec.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\81523047.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\81523047.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: AppleOSSMgr => 2
MSCONFIG\Services: AppleTimeSrv => 2
MSCONFIG\Services: backupsvc5 => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: NitroReaderDriverReadSpool3 => 2
MSCONFIG\Services: orgaMAXMobileService => 2
MSCONFIG\Services: PSI_SVC_2 => 2
MSCONFIG\Services: STacSV => 2
MSCONFIG\Services: Virtual Router => 2
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Virtual Router Manager.lnk => C:\Windows\pss\Virtual Router Manager.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Apple_KbdMgr => C:\Program Files\Boot Camp\Bootcamp.exe
MSCONFIG\startupreg: DIMDownloading your update...1338924290338 => "K:\Program Files\Corel\CorelDRAW Graphics Suite X6\Draw\DIM.EXE" "c:\programdata\corel\downloads\540240626_310002\1338924290338\dim_params.xml" -Launch=3 -uibase="c:\users\nuzoo\appdata\roaming\corel\messages\540240626_310002\en\messagecache2\workflow"
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: MMReminderService => K:\Program Files\Mindjet\MindManager 14\MMReminderService.exe
MSCONFIG\startupreg: MyRouter => k:\Program Files\MyRouter\MyRouter.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: Spotify => "C:\Users\Nuzoo\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Nuzoo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SysTrayApp => %ProgramFiles%\IDT\WDM\sttray.exe
MSCONFIG\startupreg: TornTv Downloader => C:\Users\Nuzoo\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup
MSCONFIG\startupreg: uTorrent => "C:\Users\Nuzoo\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
MSCONFIG\startupreg: Virtual WiFi Router => ""
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-189806087-158390553-3371217362-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-189806087-158390553-3371217362-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-189806087-158390553-3371217362-1009 - Limited - Enabled)
Nuzoo (S-1-5-21-189806087-158390553-3371217362-1000 - Administrator - Enabled) => C:\Users\Nuzoo

==================== Faulty Device Manager Devices =============

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Atheros AR5006EXS Wireless Network Adapter
Description: Atheros AR5006EXS Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/08/2014 09:25:52 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3208) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/08/2014 09:04:56 PM) (Source: SignInAssistant) (EventID: 0) (User: )
Description: StartService failed with hr = 0x80070422

Error: (12/07/2014 07:27:55 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3208) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 07:02:17 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3208) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 02:22:06 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3464) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 11:45:34 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3464) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 11:44:03 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3464) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 09:50:34 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3464) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 09:17:27 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows (3464) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 51347456 (0x00000000030f8000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e], die tatsächliche Prüfsumme [88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (12/07/2014 09:04:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Nitro_PIPAssistant.exe, Version: 3.5.6.5, Zeitstempel: 0x51f0a7e0
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1168
Startzeit der fehlerhaften Anwendung: 0xNitro_PIPAssistant.exe0
Pfad der fehlerhaften Anwendung: Nitro_PIPAssistant.exe1
Pfad des fehlerhaften Moduls: Nitro_PIPAssistant.exe2
Berichtskennung: Nitro_PIPAssistant.exe3


System errors:
=============
Error: (12/08/2014 08:04:59 PM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004

Error: (12/08/2014 02:59:20 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/08/2014 01:32:03 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/08/2014 00:00:07 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/07/2014 09:39:19 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/07/2014 09:39:19 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/07/2014 09:39:16 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/07/2014 07:49:06 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/07/2014 07:49:10 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (12/07/2014 07:33:47 PM) (Source: Microsoft-Windows-HAL) (EventID: 12) (User: )
Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.


Microsoft Office Sessions:
=========================
Error: (12/08/2014 09:25:52 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3208Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/08/2014 09:04:56 PM) (Source: SignInAssistant) (EventID: 0) (User: )
Description: StartService failed with hr = 0x80070422

Error: (12/07/2014 07:27:55 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3208Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 07:02:17 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3208Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 02:22:06 PM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3464Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 11:45:34 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3464Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 11:44:03 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3464Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 09:50:34 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3464Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 09:17:27 AM) (Source: ESENT) (EventID: 474) (User: )
Description: Windows3464Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb51347456 (0x00000000030f8000)32768 (0x00008000)-1018 (0xfffffc06)[7605760572246690:2555daaa9c78049a:f3770c888d1d62be:066c066c19fe001e][88ab77542deacca6:7aab7aab9c480ead:f3770c888d1d62be:066c066c19fe001e]1566 (0x61E)

Error: (12/07/2014 09:04:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nitro_PIPAssistant.exe3.5.6.551f0a7e0MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd116801d011f414460a2dC:\PROGRA~1\Nitro\READER~1\Nitro_PIPAssistant.exeC:\Windows\system32\MSVCR100.dllb3cb60dc-7de7-11e4-a24c-001ff344cb10


CodeIntegrity Errors:
===================================
  Date: 2014-09-19 18:16:19.590
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22411_none_c04d416616480b5a\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:19.490
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22411_none_c04d416616480b5a\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:19.390
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22411_none_c04d416616480b5a\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:19.155
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:19.055
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:18.956
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:18.821
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.21490_none_be0f60ea19636b51\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:18.720
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.21490_none_be0f60ea19636b51\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 18:16:18.620
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.21490_none_be0f60ea19636b51\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 17:00:48.100
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_598d480629c3881b\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz
Percentage of memory in use: 90%
Total physical RAM: 2015.94 MB
Available physical RAM: 185.38 MB
Total Pagefile: 4031.88 MB
Available Pagefile: 1194.05 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.85 MB

==================== Drives ================================

Drive a: (Server) (Fixed) (Total:483.12 GB) (Free:472.76 GB) NTFS
Drive c: (BOOTCAMP) (Fixed) (Total:74.52 GB) (Free:16.87 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (System2) (Fixed) (Total:158.36 GB) (Free:68.08 GB) NTFS
Drive j: (Speicher) (Fixed) (Total:465.77 GB) (Free:428.33 GB) NTFS
Drive k: (New Volume) (Fixed) (Total:796.81 GB) (Free:148.74 GB) NTFS
Drive o: (New Volume) (Fixed) (Total:117.3 GB) (Free:101.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 0F272B24)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=158.4 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0B224F2F)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=483.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=914.1 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

O.K habe Punkt 1 - 2 der Liste abgearbeitet defroggt und den ersten scan mit FRST ausgeführt.

Sorry leider habe ich den Button zum bearbeiten eines Beitrags nicht gefunden darum diese Antwort.

Hier das Log von FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-12-2014 02
Ran by Nuzoo (administrator) on ORBIT on 08-12-2014 23:54:12
Running from C:\Desktop
Loaded Profile: Nuzoo (Available profiles: Nuzoo & Administrator & Gast)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ABBYY InfoPoisk LLC) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(UltraVNC) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(UltraVNC) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
(Sysinternals - www.sysinternals.com) K:\Downloads\procexp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Spotify Ltd) C:\Users\Nuzoo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(BitTorrent Inc.) C:\Users\Nuzoo\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) D:\Program Files (x86)\Aurora\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM\...\Run: [Bonus.SSR.FR11] => C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe [2558776 2014-12-04] (Malwarebytes Corporation)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [Spotify Web Helper] => C:\Users\Nuzoo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-12-07] (Spotify Ltd)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Run: [uTorrent] => C:\Users\Nuzoo\AppData\Roaming\uTorrent\uTorrent.exe [1682512 2014-12-07] (BitTorrent Inc.)
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\MountPoints2: {59e5445e-51fb-11e4-83c1-001ff344cb10} - F:\sources\sperr32.exe x64
HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\MountPoints2: {c9bf244a-65d7-11e4-ad12-001ff344cb10} - F:\sources\sperr32.exe x64
IFEO\taskmgr.exe: [Debugger] "K:\DOWNLOADS\PROCEXP.EXE"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
CHR HKU\S-1-5-21-189806087-158390553-3371217362-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-189806087-158390553-3371217362-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49853;https=127.0.0.1:49853
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-189806087-158390553-3371217362-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> {60D97BEE-7B71-4514-8485-3DDBD718A07D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-189806087-158390553-3371217362-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> K:\Program Files\Mindjet\MindManager 14\Mm8InternetExplorer.dll (Mindjet)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> K:\Programme\bin\ssv.dll No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> K:\Programme\bin\jp2ssv.dll No File
BHO: Web Security -> {f794b26a-0d24-4538-9012-cd462b2071e4} -> C:\Program Files\Web Security\websecurity.dll (Web Security Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{267620B0-88FF-450F-AAD5-0F7848F9BBB8}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{D6498B65-2EF2-4A4B-AB07-8796E54E911D}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\i9rargvi.default-1417938174393
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> K:\Programme\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> K:\Programme\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nitropdf.com/NitroPDF -> C:\Program Files\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\user.js
FF user.js: detected! => C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\txfgy6mr.default-1416764488477\user.js
FF Extension: ADB Helper - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\adbhelper@mozilla.org [2014-11-13]
FF Extension: Firefox Developer Tools Adapters - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxdevtools-adapters@mozilla.org [2014-12-04]
FF Extension: Firefox OS 1.3 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_1_3_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 1.4 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_1_4_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.0 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_0_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.1 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_1_simulator@mozilla.org [2014-11-13]
FF Extension: Firefox OS 2.2 Simulator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fxos_2_2_simulator@mozilla.org [2014-11-25]
FF Extension: Show Profile - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\show_profile@oliverpiltz.de [2014-12-02]
FF Extension: ColorfulTabs - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-12-04]
FF Extension: FireShot - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-12-01]
FF Extension: anonymoX - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\client@anonymox.net.xpi [2014-12-02]
FF Extension: pearltrees - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\collector@broceliand.fr.xpi [2014-11-18]
FF Extension: Firefox Interest Dashboard - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\firefox.interest.dashboard@up.mozilla.xpi [2014-12-02]
FF Extension: Font Finder - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\fontfinder@bendodson.com.xpi [2014-12-01]
FF Extension: ProxTube - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\ich@maltegoetz.de.xpi [2014-12-02]
FF Extension: Gmail Notifier (restartless) - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi [2014-11-19]
FF Extension: Google search link fix - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid0-XWJxt5VvCXkKzQK99PhZqAn7Xbg@jetpack.xpi [2014-12-02]
FF Extension: Google™ Translator - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2014-11-17]
FF Extension: SQLite Manager - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2014-12-01]
FF Extension: Google Translator for Firefox - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\translator@zoli.bod.xpi [2014-11-18]
FF Extension: UnreadTabTracker - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\unreadtabtracker@moz.sepand.xpi [2014-11-24]
FF Extension: Integrated Inbox for Gmail &amp; Google Apps - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{28197867-b1ef-4140-8e3b-55c45b9c8460}.xpi [2014-11-17]
FF Extension: Web Developer - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2014-12-01]
FF Extension: Adblock Plus - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-17]
FF Extension: BetterPrivacy - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\6h2q0fm8.dev-edition-default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-11-20]
FF Extension: Techgile 1.0.1 - C:\Users\Nuzoo\AppData\Roaming\Mozilla\Firefox\Profiles\txfgy6mr.default-1416764488477\Extensions\{7594955a-29b6-4548-9263-89299555d649}.xpi [2014-12-05]
FF HKLM\...\Firefox\Extensions: [{f197fd56-67d6-4c64-b489-8d258b5be5bc}] - C:\Program Files\Web Security\websecurity.xpi
FF Extension: No Name - C:\Program Files\Web Security\websecurity.xpi [2014-09-30]
FF StartMenuInternet: FIREFOX.EXE - D:\Program Files (x86)\Aurora\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhggankplfegmjjngfmhfajedmiikolo [2014-09-20]
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko [2014-09-20]
CHR Extension: (No Name) - C:\Users\Nuzoo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnoffddplpippgcfjdhbmhkofpnaalpg [2014-10-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [khnjmagdblgbcncfepcaceilfekckalj] - C:\Program Files\Web Security\websecurity.crx [2014-09-30]
CHR HKU\S-1-5-21-189806087-158390553-3371217362-1000\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Nuzoo\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-09-30]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
S4 AppleOSSMgr; C:\Windows\system32\AppleOSSMgr.exe [194432 2011-06-29] ()
S4 AppleTimeSrv; C:\Windows\system32\AppleTimeSrv.exe [100224 2011-06-29] (Apple Inc.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S4 backupsvc5; K:\BackupSOFT\backupsvc5.exe [1198080 2014-11-10] (Digital Dynamic) [File not signed]
R2 MbaeSvc; C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe [544056 2014-12-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
S4 NitroReaderDriverReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [196624 2013-07-26] (Nitro PDF Software)
S3 PSEXESVC; C:\Windows\PSEXESVC.exe [189792 2014-12-08] (Sysinternals)
R2 uvnc_service; C:\Program Files\uvnc bvba\UltraVNC\WinVNC.exe [1795864 2014-10-01] (UltraVNC)
S4 orgaMAXMobileService; "k:\orgaMAX\orgamaxmobil_service.exe" s [X]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S3 systemcmd; cmd /k start [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwf.sys [12800 2009-03-06] ()
R0 AppleHFS; C:\Windows\system32\Drivers\AppleHFS.sys [49664 2011-06-13] (Apple Inc.) [File not signed]
R0 AppleMNT; C:\Windows\system32\Drivers\AppleMNT.sys [6784 2011-06-13] (Apple Inc.) [File not signed]
S3 BthKicker; C:\Windows\System32\DRIVERS\BthKicker.sys [7424 2011-02-07] (Apple Inc.)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2014-12-02] (Phoenix Technologies) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-12-07] (Disc Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15384 2014-01-07] ()
R1 ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\mbae.sys [47928 2014-12-04] ()
R3 IRRemoteFlt; C:\Windows\System32\DRIVERS\IRFilter.sys [16512 2011-02-07] (Apple Inc.)
R2 KeyAgent; C:\Windows\system32\drivers\KeyAgent.sys [6528 2011-06-15] (Apple Inc.) [File not signed]
R2 MacHALDriver; C:\Windows\system32\drivers\MacHALDriver.sys [12928 2011-03-25] (Apple Inc.) [File not signed]
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [75480 2014-11-21] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 netmon_wfp; C:\Windows\System32\drivers\netmon_wfp.sys [44248 2014-08-25] (Windows (R) Win 7 DDK provider)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R1 pefndis; C:\Windows\System32\DRIVERS\pefndis.sys [51888 2013-09-23] (Microsoft Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [347136 2009-07-13] (Realtek Semiconductor Corporation                           )
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
S3 wfpcapture; C:\Windows\System32\Drivers\wfpcapture.sys [56496 2013-09-23] (Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\System32\drivers\WsAudioDevice_383.sys [25632 2014-07-31] (Wondershare)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 cpuz138; \??\C:\Users\Nuzoo\AppData\Local\Temp\cpuz138\cpuz138_x32.sys [X]
U5 UnlockerDriver5; K:\Programme\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 23:27 - 2014-12-08 23:27 - 00189792 _____ (Sysinternals) C:\Windows\PSEXESVC.exe
2014-12-08 23:21 - 2014-12-08 23:21 - 00000000 _____ () C:\Users\Nuzoo\defogger_reenable
2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieUserList
2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieSiteList
2014-12-07 11:41 - 2014-12-08 21:04 - 00000000 __SHD () C:\Users\Nuzoo\AppData\Local\EmieBrowserModeList
2014-12-07 10:58 - 2014-12-07 11:41 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit
2014-12-07 10:58 - 2014-12-07 10:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2014-12-07 10:58 - 2014-12-07 10:58 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit
2014-12-07 09:20 - 2007-02-12 13:36 - 00277784 _____ (Intel Corporation) C:\Windows\system32\Drivers\iastor.sys
2014-12-07 06:09 - 2014-12-07 06:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DB Browser for SQLite
2014-12-07 03:59 - 2014-12-07 04:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\DAEMON Tools Lite
2014-12-07 03:59 - 2014-12-07 03:59 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-12-07 03:52 - 2014-12-07 03:52 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\MetaGeek,_LLC
2014-12-07 03:49 - 2014-12-07 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 11
2014-12-07 03:48 - 2014-12-07 03:51 - 00000000 ____D () C:\Program Files\ABBYY FineReader 11
2014-12-07 03:48 - 2014-12-07 03:48 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\ABBYY
2014-12-07 03:48 - 2014-12-07 03:48 - 00000000 ____D () C:\ProgramData\ABBYY
2014-12-07 01:20 - 2014-12-07 01:20 - 00000000 ____D () C:\tEST
2014-12-07 00:26 - 2014-12-07 00:26 - 00014088 _____ (Sysinternals - www.sysinternals.com) C:\Windows\system32\Drivers\PROCEXP141.SYS
2014-12-06 16:27 - 2014-12-06 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2014-12-06 16:27 - 2014-12-06 16:27 - 00000000 ____D () C:\Program Files\Intel Driver Update Utility
2014-12-06 15:54 - 2014-12-08 23:54 - 00000000 ____D () C:\FRST
2014-12-05 06:28 - 2014-12-07 02:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-12-05 06:28 - 2014-12-06 15:32 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-05 06:27 - 2014-10-27 12:10 - 00018200 _____ () C:\Windows\system32\roboot.exe
2014-12-05 06:27 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-12-05 05:50 - 2014-12-05 05:50 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Nitro
2014-12-05 04:14 - 2014-12-05 04:14 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Corel
2014-12-05 04:01 - 2014-12-05 04:01 - 00090232 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-05 03:56 - 2014-12-05 03:57 - 00000000 ____D () C:\Users\Gast
2014-12-05 03:56 - 2014-12-05 03:56 - 00001425 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-05 03:56 - 2014-12-05 03:56 - 00000020 ___SH () C:\Users\Gast\ntuser.ini
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-12-05 03:56 - 2014-12-05 03:56 - 00000000 ____D () C:\Users\Gast\AppData\Local\VirtualStore
2014-12-05 03:56 - 2014-11-03 20:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-12-05 03:56 - 2014-09-22 02:01 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-12-05 03:56 - 2014-09-13 03:54 - 00002086 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-12-05 03:56 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-05 03:56 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-05 00:21 - 2014-12-07 00:37 - 00324096 ___SH () C:\Users\Nuzoo\Thumbs.db
2014-12-05 00:01 - 2014-12-05 00:01 - 00000000 ____D () C:\dell
2014-12-04 21:09 - 2014-12-04 21:09 - 00000000 ____D () C:\Program Files\Web Security
2014-12-03 02:40 - 2014-12-03 02:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2014-12-03 02:40 - 2014-12-03 02:40 - 00000000 ____D () C:\Program Files\WinPcap
2014-12-03 02:39 - 2014-12-08 23:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cain
2014-12-03 02:08 - 2014-12-06 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PCI-PCI Express Configuration Utility
2014-12-03 02:08 - 2014-12-03 07:44 - 00000000 ____D () C:\Program Files\Intel PCI-PCI Express Configuration Utility
2014-12-03 02:08 - 2006-03-12 18:29 - 00257619 _____ () C:\Windows\pciesnoop.HLP
2014-12-03 02:08 - 2006-01-05 17:10 - 00000359 _____ () C:\Windows\pciesnoop.CNT
2014-12-03 00:36 - 2014-12-03 00:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2014-12-03 00:36 - 2014-12-03 00:36 - 00000000 ____D () C:\Program Files\Elaborate Bytes
2014-12-03 00:01 - 2014-12-03 00:01 - 00000000 ____D () C:\ProgramData\IntelDLM
2014-12-03 00:00 - 2014-12-03 00:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Intel
2014-12-02 23:54 - 2014-12-02 23:54 - 00000000 ____D () C:\Users\Nuzoo\Intel
2014-12-02 23:36 - 2014-12-02 23:36 - 00023456 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys
2014-12-02 23:34 - 2014-12-02 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-12-02 21:44 - 2014-12-02 21:44 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Apps\2.0
2014-12-02 19:20 - 2014-12-02 19:56 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\KeePass
2014-11-28 04:41 - 2014-11-28 04:41 - 00090232 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-28 04:40 - 2014-12-03 07:48 - 00000000 ____D () C:\Users\Administrator
2014-11-28 04:40 - 2014-11-28 04:41 - 00000160 ___SH () C:\Users\Administrator\ntuser.ini
2014-11-28 04:40 - 2014-11-28 04:40 - 00001425 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-11-28 04:40 - 2014-11-28 04:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-11-28 04:40 - 2014-11-03 20:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-28 04:40 - 2014-09-22 02:01 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-11-28 04:40 - 2014-09-13 03:54 - 00002086 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-11-28 04:40 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-28 04:40 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-28 00:09 - 2014-11-28 01:35 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Mindjet
2014-11-27 23:51 - 2014-11-27 23:51 - 00002886 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Mindjet MindManager 14.lnk
2014-11-27 23:51 - 2014-11-27 23:51 - 00000000 ____D () C:\ProgramData\Mindjet
2014-11-27 23:51 - 2014-11-27 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mindjet MindManager 14
2014-11-26 06:30 - 2014-11-26 06:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSSL
2014-11-26 06:30 - 2014-11-26 06:47 - 00000000 ____D () C:\OpenSSL-Win32
2014-11-26 06:30 - 2014-10-15 07:36 - 01179648 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libeay32.dll
2014-11-26 06:30 - 2014-10-15 07:36 - 00273920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\ssleay32.dll
2014-11-26 06:30 - 2014-10-15 07:36 - 00273920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libssl32.dll
2014-11-25 05:49 - 2014-11-25 05:49 - 00051862 _____ () C:\Windows\system32\energy-report.html
2014-11-25 00:45 - 2014-11-25 00:45 - 00002125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-11-25 00:45 - 2014-11-25 00:45 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-11-24 07:07 - 2014-11-24 07:07 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Console
2014-11-24 03:02 - 2014-11-24 03:02 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AusweisApp2
2014-11-23 20:27 - 2014-12-01 05:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-23 20:27 - 2014-11-23 20:27 - 00000000 ____D () C:\ProgramData\Avira
2014-11-23 20:27 - 2014-11-23 20:27 - 00000000 ____D () C:\Program Files\Avira
2014-11-23 19:38 - 2014-11-23 19:39 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\ApexDC++
2014-11-23 19:38 - 2014-11-23 19:38 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\ApexDC++
2014-11-23 18:42 - 2014-12-06 16:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-23 18:42 - 2014-11-23 18:42 - 00000000 ____D () C:\Program Files\Uniblue
2014-11-23 18:40 - 2014-11-23 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ApexDC++ - The Pinnacle of File-Sharing
2014-11-22 22:10 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-22 22:10 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-22 22:05 - 2014-11-22 22:05 - 00015786 _____ () C:\Windows\system32\results.xml
2014-11-22 21:31 - 2014-12-04 23:57 - 00002057 _____ () C:\Windows\epplauncher.mif
2014-11-22 16:34 - 2014-12-05 07:33 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Malwarebytes
2014-11-22 16:28 - 2014-11-22 16:35 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-11-22 16:02 - 2014-11-22 16:14 - 00000000 ____D () C:\ProgramData\Ralink
2014-11-22 16:00 - 2014-11-22 16:00 - 00000000 ____D () C:\ProgramData\Edimax Driver
2014-11-22 16:00 - 2014-11-22 16:00 - 00000000 ____D () C:\Program Files\Edimax
2014-11-21 16:02 - 2014-11-21 16:02 - 00000000 ____D () C:\ProgramData\Mediatek
2014-11-20 06:41 - 2014-11-20 06:41 - 00000000 ____D () C:\ProgramData\Mediatek Driver
2014-11-20 06:41 - 2014-11-20 06:41 - 00000000 ____D () C:\Program Files\Cisco
2014-11-20 05:33 - 2014-11-22 16:38 - 00000000 ____D () C:\Program Files\EnterDigital
2014-11-19 21:23 - 2014-11-19 21:23 - 00000000 ____D () C:\Windows\system32\Lang
2014-11-19 21:13 - 2014-12-07 08:03 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\WinDNSdynamic
2014-11-19 20:36 - 2014-11-19 20:36 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\InstallShield
2014-11-17 23:03 - 2014-11-22 21:55 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\InetStat
2014-11-17 20:53 - 2014-12-07 10:34 - 00000836 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-17 00:19 - 2014-11-17 19:05 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-11-16 20:44 - 2014-11-22 18:37 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\GetPrivate
2014-11-16 19:47 - 2014-11-17 02:30 - 00000304 _____ () C:\Windows\Tasks\At1.job
2014-11-16 06:17 - 2013-09-30 16:26 - 02881848 _____ () C:\Windows\system32\pwNative.exe
2014-11-16 06:17 - 2013-09-30 16:26 - 00015688 ____N () C:\Windows\system32\pwdrvio.sys
2014-11-16 06:17 - 2013-09-30 16:26 - 00010320 ____N () C:\Windows\system32\pwdspio.sys
2014-11-16 06:16 - 2014-11-16 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Home Edition 8.1.1
2014-11-16 05:43 - 2014-11-16 05:43 - 00000000 ____D () C:\Users\Nuzoo\firefox
2014-11-13 23:06 - 2014-11-13 23:06 - 00000000 ____D () C:\Program Files\Corel
2014-11-13 22:54 - 2014-11-13 22:55 - 00000000 ____D () C:\Program Files\GUMBACC.tmp
2014-11-12 08:46 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:46 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:45 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:45 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:45 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:45 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:45 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:45 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:45 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:45 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:45 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:45 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:45 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:45 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:45 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:45 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:45 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:45 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:45 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:45 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:45 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:45 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:45 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:45 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:45 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:45 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:45 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:45 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:45 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:45 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:45 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:45 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:45 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:45 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:45 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:45 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:45 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:45 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:45 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:45 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:45 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:45 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:45 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:45 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:45 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:45 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:45 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:45 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 01:20 - 2014-12-02 21:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Nitro PDF
2014-11-10 23:50 - 2014-11-10 23:50 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Digital Dynamic
2014-11-10 23:19 - 2014-12-01 00:15 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00002487 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\ProgramData\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\Program Files\Nitro
2014-11-10 23:19 - 2014-11-10 23:19 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2014-11-10 23:19 - 2013-07-26 06:48 - 00027152 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll
2014-11-10 23:19 - 2013-07-26 06:48 - 00018448 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll
2014-11-10 23:18 - 2014-11-10 23:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Downloaded Installations

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-08 23:54 - 2014-09-29 03:52 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\uTorrent
2014-12-08 23:52 - 2010-11-20 22:01 - 01745368 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 23:49 - 2014-09-19 09:36 - 00001686 _____ () C:\Windows\Tasks\LZKKBIVA.job
2014-12-08 23:49 - 2014-09-07 19:42 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-08 23:48 - 2014-09-06 13:20 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-12-08 23:48 - 2010-11-20 22:48 - 01226120 _____ () C:\Windows\PFRO.log
2014-12-08 23:48 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 23:48 - 2009-07-14 05:39 - 00009775 _____ () C:\Windows\setupact.log
2014-12-08 23:48 - 2009-07-14 05:33 - 00385512 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-08 23:41 - 2014-09-01 02:00 - 01836345 _____ () C:\Windows\WindowsUpdate.log
2014-12-08 23:33 - 2009-07-14 05:34 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-08 23:33 - 2009-07-14 05:34 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-08 23:27 - 2014-10-12 14:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-12-08 23:21 - 2014-09-01 07:29 - 00000000 ____D () C:\Users\Nuzoo
2014-12-08 22:59 - 2014-09-07 19:42 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-08 21:24 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-08 20:58 - 2014-10-13 14:15 - 00002896 _____ () C:\Users\Nuzoo\ipconfig.all.txt
2014-12-08 20:08 - 2014-10-10 00:14 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Spotify
2014-12-08 19:53 - 2014-09-11 18:44 - 00090232 _____ () C:\Users\Nuzoo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-07 22:05 - 2014-10-10 00:15 - 00001796 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-12-07 22:01 - 2014-10-10 00:15 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Spotify
2014-12-07 10:47 - 2014-09-19 10:52 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-07 08:13 - 2009-10-01 15:21 - 00006976 _____ () C:\Users\Nuzoo\AHCI_Trick_23.reg
2014-12-07 06:51 - 2014-09-05 01:18 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\vlc
2014-12-07 06:15 - 2014-09-17 23:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-12-07 03:59 - 2014-09-02 01:20 - 00223538 _____ () C:\Windows\DPINST.LOG
2014-12-07 03:59 - 2013-11-23 14:01 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-12-07 03:11 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2014-12-05 07:33 - 2014-09-15 21:20 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-05 04:20 - 2013-02-19 03:34 - 00000295 ___SH () C:\boot.ini
2014-12-03 07:44 - 2014-10-21 11:45 - 00000000 ____D () C:\Users\admin
2014-12-03 07:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-12-03 07:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-12-03 07:36 - 2014-09-02 01:04 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-03 01:20 - 2014-09-27 22:07 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:14 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-01 05:01 - 2014-10-16 02:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows OPK
2014-12-01 05:01 - 2014-10-16 01:58 - 00000000 ____D () C:\Program Files\Windows Imaging
2014-12-01 04:15 - 2014-09-01 08:29 - 00000000 ____D () C:\ProgramData\Samsung
2014-12-01 04:11 - 2014-09-06 22:42 - 00000000 ____D () C:\Temp
2014-11-28 05:42 - 2014-09-27 02:51 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-28 04:40 - 2014-10-08 08:08 - 00001066 _____ () C:\Users\Nuzoo\2.txt
2014-11-26 20:39 - 2014-09-01 08:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Roaming\Mozilla
2014-11-26 20:39 - 2014-09-01 08:00 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Mozilla
2014-11-26 19:35 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2014-11-25 07:28 - 2014-09-26 05:59 - 00007630 _____ () C:\Users\Nuzoo\AppData\Local\resmon.resmoncfg
2014-11-24 07:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Speech
2014-11-23 21:13 - 2014-09-02 01:41 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-22 22:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Web
2014-11-22 18:37 - 2014-09-20 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X6
2014-11-22 18:37 - 2014-09-15 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiveSupport
2014-11-22 18:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spool
2014-11-22 18:33 - 2014-10-13 13:49 - 00000000 ____D () C:\Program Files\MediatekWiFi
2014-11-22 18:33 - 2014-09-20 23:40 - 00000000 ____D () C:\ProgramData\Corel
2014-11-22 18:33 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-21 06:14 - 2014-09-19 10:51 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-09-19 10:51 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-09-19 10:51 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-18 14:39 - 2014-10-21 12:27 - 00002315 _____ () C:\Windows\comsetup.log
2014-11-18 03:54 - 2014-10-19 08:56 - 00000792 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-18 03:54 - 2014-09-21 21:53 - 00000812 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aurora.lnk
2014-11-18 03:54 - 2014-09-15 16:34 - 00002258 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-11-18 03:54 - 2014-09-01 07:30 - 00001417 _____ () C:\Users\Nuzoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-17 00:19 - 2009-07-14 03:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-16 22:23 - 2014-10-31 09:47 - 00000000 ____D () C:\Windows\system32\Logfiles
2014-11-16 22:23 - 2014-10-31 00:34 - 00000000 ____D () C:\Windows\system32\LogFiles - Kopie
2014-11-16 07:53 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-11-16 04:25 - 2014-09-14 01:29 - 00000000 ____D () C:\Users\Nuzoo\AppData\Local\Windows Live Writer
2014-11-13 03:25 - 2014-09-01 18:30 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 03:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-13 03:06 - 2014-09-01 10:26 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 03:02 - 2014-09-01 10:25 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-08 23:20 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports

Files to move or delete:
====================
C:\Users\Nuzoo\AHCI_Trick_23.reg
C:\Windows\Tasks\At1.job


Some content of TEMP:
====================
C:\Users\Nuzoo\AppData\Local\Temp\InstallMonetizer.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-18 09:15

==================== End Of Log ============================
         

--- --- ---

Hi

Bitte alle Logs von MBAM mit Funden nachreichen...