Laptop ist extrem langsam geworden und oeffnet selbstaendig internettabs

wieburanda · 26.12.2014, 11:49

Hallo zusammen, mein Laptop ist extrem langsam geworden und offnet waerend ich auf einer internetseite bin staendig neue tabs mit werbung. Bitte um Hilfe, Danke

Bootsektor · 26.12.2014, 13:31

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

wieburanda · 27.12.2014, 14:42

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-12-2014
Ran by will (administrator) on WILL-PC on 27-12-2014 14:24:47
Running from C:\Users\will\Downloads
Loaded Profile: will (Available profiles: will & Administrator)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Systweak Software, (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe
(MS) C:\Program Files\LSM\aus.exe
(ArcSoft, Inc.) C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe
(B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Systweak Software.) C:\Program Files\Disk Speedup\DSUDefragSrv.exe
(Fortinet Inc.) C:\Windows\System32\FortiSSLVPNdaemon.exe
(MS) C:\Program Files\LSM\lsm.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Fujitsu Siemens Computers) C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files\ASP\AdvancedSystemProtector.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(MS) C:\Program Files\LSM\lsm.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1996072 2013-03-01] (Synaptics Incorporated)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2009-10-26] (Motorola Inc.)
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [192512 2007-07-26] (Wistron)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-21] (APN)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-06-17] (Realtek Semiconductor)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [pgcchelper] => C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe [465920 2013-08-21] ()
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Bubble Dock] => "C:\Users\will\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Google Update] => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30521952 2014-11-24] (Skype Technologies S.A.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {b8e7d562-a735-11de-a513-000df05f8e4b} - .\MigWiz\migsetup.exe
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {e56a9566-e159-11de-9981-000df05f8e4b} - SYSTEM\G-923-321232-3232-32211-23\memory.exe
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\PROGRA~1\SupTab\SEARCH~1.DLL File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP SimpleSave Monitor.lnk
ShortcutTarget: HP SimpleSave Monitor.lnk -> C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe ()
BootExecute: sasnative32autocheck autochk * ROBoot

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-1275960161-2095831957-4263473684-1000] => proxy1.emirates.net.ae:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = webssearches
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = webssearches
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = Fixhomepage
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = Fixhomepage
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = webssearches
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = webssearches
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN UK - Outlook.com formerly Hotmail, Skype, Bing and Latest News
URLSearchHook: HKLM - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5012_7&babsrc=SP_ss&mntrId=e8cf939000000000000000225f148849
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5012_7&babsrc=SP_ss&mntrId=e8cf939000000000000000225f148849
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6CFEC6DA-2FA2-4959-809B-460F97521EE5} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {AAD4C5B3-637E-4907-8F64-74FCEDCA6498} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10267&src=crm&q={searchTerms}&locale=de_IT&apn_ptnrs=^AGY&apn_dtid=^YYYYYY^YY^IT&apn_uid=bb20af7d-a604-4ef2-9454-c948df1deb3f&apn_sauid=C63C5408-A420-4FE3-8C0C-667C8A9B4B4A
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: No Name -> {D4027C7F-154A-4066-A1AD-4243D8127440} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 38 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA5BE45F-BBEC-4ACC-9728-C8E488EB145B}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @FortinetCacheClean -> C:\Program Files\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
FF Plugin: @FortinetTunnelControl -> C:\Program Files\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.1 -> C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/O1DPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=3 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=9 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-05-07]
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2011-06-11]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-02-18]
FF HKLM\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-05-21]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-06-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.searchnu.com/421
CHR StartupUrls: Default -> "hxxp://www.searchnu.com/421", "hxxp://www.claro-search.com/?affID=117423&tt=5012_7&babsrc=HP_ss&mntrId=e8cf939000000000000000225f148849", "hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\will\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-10-14]
CHR Extension: (Google Docs) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]
CHR Extension: (Google Drive) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-06]
CHR Extension: (YouTube) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]
CHR Extension: (Adblock Plus) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-26]
CHR Extension: (Google Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]
CHR Extension: (JavaScript Popup Blocker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2014-12-22]
CHR Extension: (RealDownloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-03-06]
CHR Extension: (Google Wallet) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-06]
CHR Extension: (Gmail) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-03-06]
CHR HKLM\...\Chrome\Extension: [kbjlipmgfoamgjaogmbihaffnpkpjajp] - C:\Program Files\Nosibay\Bubble Dock\extensions\GCSurfMatch.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-02-07]
CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 ASO3DiskOptimizer; C:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe [241472 2014-07-02] (Systweak Software, (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free))
R2 AUS; C:\Program Files\LSM\aus.exe [287744 2014-02-22] (MS) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BackupService; C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [83512 2010-07-01] (ArcSoft, Inc.)
R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [145504 2007-06-15] (B.H.A Corporation)
R2 DSUDiskOptimizer; C:\Program Files\Disk Speedup\DSUDefragSrv.exe [669456 2014-12-16] (Systweak Software.)
R2 FortiSslvpnDaemon; C:\Windows\system32\FortiSSLVPNdaemon.exe [825960 2011-06-14] (Fortinet Inc.)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [630784 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 Log S.M.; C:\Program Files\LSM\lsm.exe [428032 2014-02-22] (MS) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) [File not signed]
R2 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [303104 2008-04-25] (Fujitsu Siemens Computers) [File not signed]
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118784 2006-11-18] (Wistron Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-21] (Microsoft Corporation)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 cdrbsdrv; C:\Windows\system32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) [File not signed]
R3 HidMouse; C:\Windows\System32\Drivers\HidMouse.sys [25856 2005-03-14] (Hama) [File not signed]
R1 Hotkey; C:\Windows\system32\Drivers\Hotkey.sys [9867 2003-04-28] () [File not signed]
S3 johci; C:\Windows\System32\DRIVERS\johci.sys [23136 2012-07-16] (JMicron Technology Corp.)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [6144 2007-01-09] (Chic)
S3 pppop; C:\Windows\System32\DRIVERS\pppop.sys [36384 2009-07-21] (Fortinet Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26112 2011-04-26] (The OpenVPN Project) [File not signed]
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2010-01-09] (AnchorFree Inc)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 14:24 - 2014-12-27 14:26 - 00036119 _____ () C:\Users\will\Downloads\FRST.txt
2014-12-27 14:24 - 2014-12-27 14:24 - 00000000 ____D () C:\FRST
2014-12-27 14:23 - 2014-12-27 14:23 - 01114624 _____ (Farbar) C:\Users\will\Downloads\FRST.exe
2014-12-23 12:52 - 2014-12-23 12:52 - 00000580 _____ () C:\Windows\PFRO.log
2014-12-22 21:13 - 2014-12-22 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-22 21:12 - 2014-12-22 21:12 - 05317104 _____ (Piriform Ltd) C:\Users\will\Downloads\ccsetup501.exe
2014-12-13 10:33 - 2014-12-13 10:33 - 00001004 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-12 13:20 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 13:20 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 12:50 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-11 06:47 - 2014-11-14 08:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-11 06:47 - 2014-11-14 08:13 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 06004224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 11083264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 02006016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-11 06:47 - 2014-11-14 08:11 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-11 06:47 - 2014-11-14 08:09 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-12-11 06:47 - 2014-11-14 06:38 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-11 06:47 - 2014-11-14 05:00 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-11 06:47 - 2014-11-14 04:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-11 06:47 - 2014-11-14 04:58 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-11 06:47 - 2014-11-14 04:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-02 23:25 - 2014-12-02 23:25 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-12-02 23:15 - 2014-12-02 23:15 - 00016082 _____ () C:\Windows\system32\results.xml
2014-12-02 23:14 - 2014-06-17 19:27 - 03116440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-12-02 23:14 - 2014-06-17 19:18 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-12-02 23:14 - 2014-06-17 16:08 - 01205934 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-12-02 23:14 - 2014-06-17 15:42 - 64228864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-12-02 23:14 - 2014-06-13 16:24 - 02477272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-12-02 23:14 - 2014-06-11 17:08 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-12-02 23:14 - 2014-06-11 11:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-12-02 23:14 - 2014-06-09 16:57 - 02588376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-12-02 23:14 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-12-02 23:14 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-12-02 23:14 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-12-02 23:14 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-12-02 23:14 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-12-02 23:14 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-12-02 23:14 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-12-02 23:13 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-12-02 23:13 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-12-02 23:13 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-12-02 23:13 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-12-02 23:13 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-12-02 23:13 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-12-02 23:13 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-12-02 23:13 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-12-02 23:11 - 2014-06-09 13:52 - 01451712 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2014-12-02 23:11 - 2014-06-07 00:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-12-02 23:11 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-12-02 23:11 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-12-02 23:11 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-12-02 23:11 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-12-02 22:41 - 2013-07-30 15:53 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
2014-12-02 22:36 - 2014-12-02 23:27 - 00000000 ___HD () C:\Program Files\Temp
2014-12-02 22:07 - 2014-07-16 11:05 - 00582872 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-12-02 22:07 - 2014-07-16 11:05 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-12-02 22:06 - 2014-12-02 22:06 - 00000000 ____D () C:\ProgramData\Dell
2014-12-02 14:36 - 2014-12-02 22:00 - 00000000 ____D () C:\Users\will\{d5b9c712-3742-4128-bca8-4ae1dec4d16b}
2014-12-02 12:26 - 2014-12-02 12:26 - 00000000 ____D () C:\Windows\Repair
2014-11-30 20:55 - 2014-11-30 20:55 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (3).exe
2014-11-30 20:51 - 2014-11-30 20:51 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (2).exe
2014-11-30 19:59 - 2014-11-30 19:59 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\Users\will\AppData\Local\Skype
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-30 19:56 - 2014-11-30 19:56 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (1).exe
2014-11-30 18:59 - 2014-11-30 18:59 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 14:10 - 2010-01-30 15:48 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-27 14:05 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-27 14:05 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-27 13:57 - 2012-11-12 13:13 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-27 13:29 - 2011-01-14 18:11 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job
2014-12-27 13:27 - 2013-03-05 15:09 - 01749687 _____ () C:\Windows\WindowsUpdate.log
2014-12-27 12:12 - 2014-02-13 18:00 - 00000000 ___RD () C:\Users\will\Dropbox
2014-12-27 12:12 - 2014-02-13 17:57 - 00000000 ____D () C:\Users\will\AppData\Roaming\Dropbox
2014-12-27 12:10 - 2010-01-30 15:48 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-27 12:07 - 2013-03-06 10:37 - 00000620 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-12-27 12:05 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-27 01:10 - 2009-04-27 06:54 - 00004268 _____ () C:\Windows\bthservsdp.dat
2014-12-27 01:10 - 2006-11-02 13:58 - 00032600 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-27 01:06 - 2014-08-21 20:55 - 00000404 _____ () C:\Windows\Tasks\ASO-OneClickCare.job
2014-12-26 22:10 - 2010-11-08 06:31 - 00000000 ____D () C:\Users\will\AppData\Local\CrashDumps
2014-12-26 21:17 - 2011-04-17 09:27 - 00000420 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job
2014-12-26 17:29 - 2011-01-14 18:11 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job
2014-12-26 15:02 - 2014-08-18 14:01 - 00000254 _____ () C:\Windows\Tasks\Tuneup Pro_DEFAULT.job
2014-12-26 15:01 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Tuneup Pro
2014-12-26 11:50 - 2011-05-28 13:32 - 00000868 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-12-24 23:07 - 2009-05-02 19:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Apple Computer
2014-12-24 15:01 - 2014-08-18 14:01 - 00000262 _____ () C:\Windows\Tasks\Tuneup Pro_UPDATES.job
2014-12-24 00:30 - 2013-03-06 10:37 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-12-23 14:01 - 2006-11-02 11:33 - 00801496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-22 21:18 - 2014-06-23 22:39 - 00000000 ____D () C:\Users\will\AppData\Local\pgcchelper
2014-12-22 21:18 - 2013-10-13 22:57 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-12-22 21:17 - 2014-08-21 20:18 - 00001876 _____ () C:\Users\Public\Desktop\Disk Speedup.lnk
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Speedup
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\Program Files\Disk Speedup
2014-12-22 21:13 - 2013-03-05 10:25 - 00000810 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-22 21:13 - 2013-03-05 10:25 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-22 17:29 - 2009-05-09 12:50 - 00002627 _____ () C:\Users\will\Desktop\Microsoft Office Word 2007.lnk
2014-12-17 21:39 - 2009-05-03 07:05 - 00000000 ____D () C:\Users\will\AppData\Roaming\Skype
2014-12-15 16:44 - 2014-11-11 17:05 - 00000000 ____D () C:\Users\will\Documents\daniel schual
2014-12-13 11:10 - 2011-06-16 08:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-13 10:54 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-12-13 10:34 - 2014-08-16 19:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-13 10:33 - 2013-10-13 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-12 18:14 - 2013-03-06 09:57 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-12 13:22 - 2008-04-30 05:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 13:17 - 2013-08-15 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-12 12:53 - 2006-11-02 11:24 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-12-12 12:42 - 2014-02-13 18:00 - 00000922 _____ () C:\Users\will\Desktop\Dropbox.lnk
2014-12-12 12:42 - 2014-02-13 17:58 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-10 14:57 - 2012-11-12 13:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-10 14:57 - 2011-07-10 07:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-10 14:53 - 2014-08-18 14:01 - 00000000 ____D () C:\Program Files\ASP
2014-12-10 14:00 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-12-10 13:59 - 2014-08-18 14:01 - 00000844 _____ () C:\Users\Public\Desktop\Advanced-System Protector.lnk
2014-12-10 13:59 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\systweak
2014-12-10 13:59 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-02 23:22 - 2009-04-26 21:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-12-02 23:15 - 2009-04-26 21:14 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-12-02 23:11 - 2009-04-27 06:56 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-02 23:10 - 2014-08-21 20:55 - 00000434 _____ () C:\Windows\Tasks\ASO-AutoCheckUpdate7Days.job
2014-12-02 23:05 - 2014-11-06 19:58 - 00002228 _____ () C:\Windows\system32\ASOROSet.bin
2014-12-02 23:05 - 2014-06-23 22:40 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2014-12-02 23:05 - 2011-05-28 10:13 - 00000000 ____D () C:\temp
2014-12-02 23:05 - 2009-04-26 21:17 - 00000000 ____D () C:\Users\will
2014-12-02 22:41 - 2011-05-29 13:37 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:08 - 2011-02-05 00:03 - 00000000 ____D () C:\Intel
2014-12-02 22:07 - 2009-04-26 21:14 - 00000000 ____D () C:\Program Files\Realtek
2014-11-30 20:57 - 2009-05-03 21:24 - 00000000 ____D () C:\ProgramData\Skype
2014-11-30 19:59 - 2014-03-06 20:01 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-11-30 19:59 - 2011-07-20 08:22 - 00000000 ___RD () C:\Program Files\Skype
2014-11-27 19:33 - 2009-04-27 09:40 - 00080896 _____ () C:\Users\will\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Files to move or delete:
====================
C:\ProgramData\ezsid.dat
C:\Users\will\SslvpnClient.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\temp\avgnt.exe
C:\Users\Administrator\AppData\Local\temp\NEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\uninst1.exe
C:\Users\will\AppData\Local\temp\avgnt.exe
C:\Users\will\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0anmac.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-27 12:26

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-12-2014
Ran by will at 2014-12-27 14:27:00
Running from C:\Users\will\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
7500_7600_7700_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
7-Zip 9.21beta (HKLM\...\7-Zip) (Version:  - )
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advanced System Optimizer (HKLM\...\{A1E21995-127E-4B7F-8C4D-CB04AA8A58EF}_is1) (Version: 3.6.1000.15950 - Systweak Software)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.14452 - systweak.com) <==== ATTENTION
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
AFPL Ghostscript 8.54 (HKLM\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM\...\AFPL Ghostscript Fonts) (Version:  - )
AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audioro iPod Converter 3 (HKLM\...\Audioro iPod Converter) (Version: 3 - Red Kawa)
Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1500}) (Version: 12.21.0.3945 - APN, LLC)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.4.37268 - Ask.com) <==== ATTENTION
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bid-O-Matic v2.14.12 (HKLM\...\Bid-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
bitcontrol® MPEG Video Decoder v3.0 (HKLM\...\bcMPEG2dec) (Version: 3.0 - BitCtrl Systems GmbH)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v6.00.05(FSC) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BPD_HPSU (Version: 1.00.0000 - Hewlett-Packard) Hidden
BPD_Scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 82.0.173.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Citrix XenApp Plugin for Hosted Apps (HKLM\...\{388C130B-0079-46B4-A0D5-DC2DD7A89A7B}) (Version: 11.0.0.5357 - Citrix Systems, Inc.)
Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden
CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
D45V120 (HKLM\...\{3BB9419A-CC71-4C2F-80D4-B7AC18D43268}_is1) (Version:  - FTS)
Destination Component (Version: 090.000.091.086 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Disk Speedup (HKLM\...\{FC7E771F-8170-4573-825D-EDB6723C804F}_is1) (Version: 3.2.0.16503 - Systweak Software)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.24 - DivX, LLC)
DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Educazione Stradale per la Scuola 2003 (HKLM\...\Educazione Stradale per la Scuola 2003) (Version:  - )
EOS USB WIA Driver (HKLM\...\EOS USB WIA Driver) (Version: 6.0.0.4 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
e-Wörterbücher (HKLM\...\{4737AD9F-13AA-4E4C-B86F-B631D557F6A7}) (Version:  - )
Fax (Version: 120.0.194.000 - Hewlett-Packard) Hidden
FlashLynx Video Download Software (HKLM\...\FlashLynx) (Version:  - NCH Software)
FortiClient Connect SSLVPN v4.0.2143 (HKLM\...\{A34DCE59-0004-0000-2143-3F8A9926B752}) (Version: 4.0.2143 - Fortinet Inc.)
Free M4a to MP3 Converter 7.2 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
getPlus(R) for Adobe (HKLM\...\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}) (Version: 1.5.2.35 - NOS Microsystems Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP)
HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP)
HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP)
HP Officejet Pro All-In-One Series (HKLM\...\{868EA922-5675-4E91-BDA6-BBD0F923C5EF}) (Version: 1.0 - HP)
HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
HP Photosmart.All-In-One Driver Software 8.0 .A (HKLM\...\{282E5AB2-8E47-4571-B6FA-6B512555B557}) (Version: 8.0 - HP)
HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Japanese Fonts Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5760-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
Java 7 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.400 - Oracle)
JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.11.02 - JMicron Technology Corp.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L7700 (Version: 50.0.165.000 - Hewlett-Packard) Hidden
Langenscheidt Grammatiktrainer Englisch (HKLM\...\Grammatiktrainer Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 1 Englisch (HKLM\...\Kurs 1 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 2 Englisch (HKLM\...\Kurs 2 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Vokabeltrainer 3.0 Englisch (HKLM\...\{138B4B3C-09D9-4026-AC33-998E8E5B2FEE}) (Version: 3.0.12 - Langenscheidt)
Launch Manager V1.4.9 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.4.9 - Wistron Corp.)
lingDIALOG (HKLM\...\{627C5AC0-772C-4661-B696-42E04AEB1872}) (Version: 2.00.0010 - LingCom GmbH)
MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden
MI-7200L Wireless Laser Mouse (HKLM\...\{235C3A50-559F-4CAA-BAC3-4CC9ABF51976}) (Version: 1.00.4 Build 050111 - Trust)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2742597) (HKLM\...\M2742597) (Version:  - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Standard 2007 (HKLM\...\STANDARD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc)
MPM (HKLM\...\{8F968232-15C6-4872-84C2-9FCDAA1AEAB6}) (Version: 1.00.0000 - Hewlett-Packard)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM\...\{e2bfefde-f5cb-4367-aa60-5bd209dd6d88}) (Version:  - Nero AG)
Network (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{25CFEF55-A945-41FC-86ED-76469F31DF37}) (Version: 7.1.41.0 - Nokia)
Nokia Home Media Server (HKLM\...\{0EEB3C40-2A8C-4045-B3F9-13C4A5C490C0}) (Version: 1.0.174 - Nokia)
Nokia Map Loader (HKLM\...\{45D4F727-43B5-49CD-B474-B9866A8F4FB8}) (Version: 3.0.22 - Nokia)
Nokia Music (HKLM\...\{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}) (Version: 1.1.1203 - Nokia Music)
Nokia Ovi Suite (HKLM\...\Nokia Ovi Suite) (Version: 3.1.0.91 - Nokia)
Nokia Ovi Suite (Version: 3.1.0.91 - Nokia) Hidden
Nokia Ovi Suite Software Updater (HKLM\...\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}) (Version: 02.07.004.45780 - Nokia Corporation)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.60.0 - Nokia)
Nokia PC Suite (Version: 7.1.60.0 - Nokia) Hidden
Nokia Photos (HKLM\...\{EB938616-16BB-491E-A5A0-CA4AB4167BB4}) (Version: 1.6.103 - Nokia)
Nokia Software Updater (HKLM\...\{4D568C38-0552-4CDD-A643-01FAFA2957EF}) (Version: 02.06.006.44298 - Nokia Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Ovi Desktop Sync Engine (Version: 1.5.257.0 - Nokia) Hidden
OviMPlatform (Version: 2.7.66.0 - Nokia) Hidden
PC Connectivity Solution (HKLM\...\{3DE96337-68D2-48E0-A863-6E4A5CD3BC25}) (Version: 11.4.16.0 - Nokia)
pgcchelper (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\pgcchelper) (Version:  - ) <==== ATTENTION
PHOTOfunSTUDIO HD Edition (HKLM\...\{9A9DBEBC-C800-4776-A970-D76D6AA405B1}) (Version: 3.00.126 - Panasonic)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RealDownloader (Version: 1.3.1 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 106.10.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Revo Uninstaller 1.93 (HKLM\...\Revo Uninstaller) (Version: 1.93 - VS Revo Group)
Rhapsody Player Engine (HKLM\...\{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}) (Version: 1.1.0 - RealNetworks)
Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.5.2 - Synaptics Incorporated)
SystemDiagnostics (HKLM\...\{2F04C9DA-94DA-4361-8B34-02CD8187861F}) (Version: 2.02.0004 - Fujitsu Siemens Computers       )
SystemTweaker (HKLM\...\{DBB1F4ED-3212-4F58-A427-9C01DE4A24A5}_is1) (Version: 2.0.7.0 - Uniblue Systems Ltd)
Systweak PhotoStudio 2.1 (HKLM\...\PhotoStudio_4281508C_4DA1_4d4e_81EB_725D55EC30DC_is1) (Version: 2.1.2954.85 - Systweak Inc.)
Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden
TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden
TuneUp Companion 2.4.8.5 (HKLM\...\TuneUpMedia) (Version: 2.4.8.5 - TuneUp Media, Inc.)
Tuneup Pro (HKLM\...\Tuneup Pro_is1) (Version: 1.08 - tuneuppro.com)
Uniblue SpeedUpMyPC (HKLM\...\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1) (Version:  - Uniblue Systems Ltd) <==== ATTENTION
Unity Web Player (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VideoPad Videobearbeitungs-Software (HKLM\...\VideoPad) (Version:  - NCH Software)
Videora iPod Converter 6 (HKLM\...\Videora iPod Converter) (Version: 6 - Red Kawa)
VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team)
VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Vokabeltrainer-Update 3.0.32 (HKLM\...\{782F20EF-AEB4-4062-9614-750FE8FD2542}) (Version: 3.0.32 - Langenscheidt)
WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden
webssearches uninstaller (HKLM\...\webssearches uninstaller) (Version:  - webssearches) <==== ATTENTION
Windows Driver Package - Nokia Modem  (06/09/2010 7.01.0.8) (HKLM\...\E5372C32E8562C76C24DBA6525002B1031495F34) (Version: 06/09/2010 7.01.0.8 - Nokia)
Windows Driver Package - Nokia Modem  (10/07/2010 4.6) (HKLM\...\6DA48AFDE796708D5A4C9121A83E7617A63A9A15) (Version: 10/07/2010 4.6 - Nokia)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
YouRiding FREESKI II version 1.005 (HKLM\...\{0C59CB32-93D5-4C2F-816A-2B53806F1086}_is1) (Version: 1.005 - Intellysurf)
YouTube Downloader Toolbar v4.6 (HKLM\...\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7}) (Version: 4.6 - Spigot, Inc.) <==== ATTENTION
YTD Video Downloader 3.9.6 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 3.9.6 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{00b7e0ab-817a-44ad-a04b-d1148d524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.2.183.39\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}\InprocServer32 -> C:\Windows\system32\TosBtShell.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{7c6e29bc-8b8b-4c3d-859e-af6cd158be0f}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c0-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c1-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c2-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c3-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c4-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c5-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c8-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c9-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969ca-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969d6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dc67367a-8b15-47bc-b7f8-0ba0435a504a}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dcedfcbf-c7d1-4b81-a20f-7524d306135e}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File

==================== Restore Points  =========================

23-12-2014 03:00:14 Windows Update
23-12-2014 07:05:57 Windows Update
24-12-2014 00:31:43 Windows Update
24-12-2014 17:56:31 Windows Update
25-12-2014 00:14:55 Windows Update
26-12-2014 00:30:45 Windows Update
27-12-2014 01:07:55 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2013-03-05 12:52 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FA159B-8BDE-4806-A35E-39C0DA0DDA43} - System32\Tasks\{070FAD29-CAED-47CC-B722-7C20DFCC20E2} => pcalua.exe -a F:\PSetup.exe -d F:\ -c /continue /uionlyifneeded
Task: {0D218EA4-7810-47D9-A699-CBFD670500C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0E05EC16-618B-4DDC-94AF-0812EF989E0C} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18] (Google)
Task: {0F8F09D8-C071-488E-959C-32BCF9456382} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {1202794D-B8E0-4A9F-A26B-AF9403D2A4A4} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {20612687-EF77-48D4-96E4-BC498100A5F0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {24B1FFEF-ADAF-49B4-985F-D7287515A755} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {38CB697F-A221-4ABF-AB35-817E514D27A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {3FD4A11E-93D1-4E5A-8F13-3B15343B5CB1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {4043966B-0CDA-461B-8411-F479D95BB9FF} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files\ASP\AdvancedSystemProtector.exe [2014-12-09] () <==== ATTENTION
Task: {4B6D91B8-0F82-41F2-BD7C-18222D02A1A7} - System32\Tasks\Tuneup Pro_DEFAULT => C:\Program Files\Tuneup Pro\TuneupPro.exe [2014-08-05] (Tuneup Pro)
Task: {52237933-4956-4CC0-97FE-3BBFA041FEC6} - System32\Tasks\ASO-OneClickCare => C:\Program Files\Advanced System Optimizer 3\ASO3.exe [2014-07-02] (Systweak Software, (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free))
Task: {5414A3BF-F1B7-4244-8001-F7EC3C3EBE3C} - System32\Tasks\ASO-AutoCheckUpdate7Days => C:\Program Files\Advanced System Optimizer 3\CheckUpdate.exe [2014-07-02] (Systweak Software, (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free))
Task: {5FE1355E-6DF3-4AEF-97C4-9F70AFE2DDE3} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {763F2A46-A5C2-4618-8988-AE8A7BBAAFCC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {7C36CE27-570C-454F-87E3-7F7AE10EECC9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {85E7E746-62C1-49CE-9CC7-24C0B9164C57} - System32\Tasks\{417ECCC3-2266-40FE-AFE0-788684847D58} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.64.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {983B05C1-9887-4CE9-8F4A-4536E7E6450E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A0271E82-79C3-4313-8203-5EC8608A9627} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A1518B6F-45D4-4188-9D53-0144D1B6DCF5} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {A5281EAC-8134-4018-A9A1-A4D1E51F7ACB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {A60FE53C-609F-4630-9784-44FC25A55297} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {AD884842-611D-4845-8046-72C5CF5BE993} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe
Task: {D1EAD5A0-6B72-44B2-8CB5-79E97A494D5B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {E638CA1C-E155-40A8-AE5D-D8D09D7C33B6} - System32\Tasks\Tuneup Pro_UPDATES => C:\Program Files\Tuneup Pro\TuneupPro.exe [2014-08-05] (Tuneup Pro)
Task: {E7D471DD-B58A-4175-9DA9-0C53071F2156} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASO-AutoCheckUpdate7Days.job => C:\Program Files\Advanced System Optimizer 3\CheckUpdate.exe
Task: C:\Windows\Tasks\ASO-OneClickCare.job => C:\Program Files\Advanced System Optimizer 3\ASO3.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\Tuneup Pro_DEFAULT.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
Task: C:\Windows\Tasks\Tuneup Pro_UPDATES.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2009-05-07 13:42 - 2008-02-25 19:23 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-06 01:21 - 2013-03-06 01:21 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-03-06 10:37 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-03-06 10:37 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2013-03-06 10:37 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2014-08-18 14:01 - 2014-12-09 13:48 - 06715176 _____ () C:\Program Files\ASP\AdvancedSystemProtector.exe
2014-08-18 14:01 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\ASP\System.Data.SQLite.dll
2014-08-18 14:01 - 2014-12-09 13:48 - 01730856 _____ () C:\Program Files\ASP\aspsys.dll
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-08-21 07:37 - 2013-08-21 07:37 - 00465920 _____ () C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe
2005-07-22 19:30 - 2005-07-22 19:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-27 12:10 - 2014-12-27 12:10 - 00043008 _____ () c:\users\will\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0anmac.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2011-02-08 13:51 - 2010-12-15 12:41 - 00477080 _____ () C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2009-02-26 10:46 - 2009-02-26 10:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 08:46 - 2011-06-22 08:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-12-12 18:14 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-12 18:14 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0D786AE3
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: PCToolsSSDMonitorSvc => 2
MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

========================= Accounts: ==========================

Administrator (S-1-5-21-1275960161-2095831957-4263473684-500 - Administrator - Disabled) => C:\Users\Administrator
ASPNET (S-1-5-21-1275960161-2095831957-4263473684-1002 - Limited - Enabled)
Guest (S-1-5-21-1275960161-2095831957-4263473684-501 - Limited - Disabled)
will (S-1-5-21-1275960161-2095831957-4263473684-1000 - Administrator - Enabled) => C:\Users\will

==================== Faulty Device Manager Devices =============

Name: JMicron OHCI Compliant IEEE 1394 Host Controller
Description: JMicron OHCI Compliant IEEE 1394 Host Controller
Class Guid: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
Manufacturer: JMicron Technology Corp.
Service: ohci1394
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/27/2014 00:12:29 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/27/2014 00:05:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2014 01:09:44 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (12/27/2014 01:09:38 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.

Error: (12/26/2014 10:09:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 39.0.2171.95, time stamp 0x548243f3, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0xe8fffd80,
process id 0x11bc, application start time 0xchrome.exe0.

Error: (12/26/2014 11:01:53 AM) (Source: Chrome) (EventID: 1) (User: NT AUTHORITY)
Description: Chrome has encountered a fatal error.
ver=39.0.2171.95;lang=;guid=E0CC318678244B098EFED8B75EFCBAFC;is_machine=1;oop=1;upload=1;minidump=C:\Program Files\Google\CrashReports\711c5094-1f4b-4370-85b8-f0dead6bcf94.dmp

Error: (12/26/2014 09:15:48 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/26/2014 09:09:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2014 00:32:28 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (12/26/2014 00:32:18 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.


System errors:
=============
Error: (12/27/2014 00:22:54 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (12/27/2014 00:13:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Windows Update

Error: (12/27/2014 00:07:31 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (12/27/2014 00:05:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (12/27/2014 01:09:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: 0x80070643Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941){343E12E8-8772-4A72-9982-570122E959DB}203

Error: (12/26/2014 09:22:56 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (12/26/2014 09:14:53 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error: (12/26/2014 09:14:30 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: iPod Service%%2147549465

Error: (12/26/2014 09:14:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (12/26/2014 09:11:35 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service


Microsoft Office Sessions:
=========================
Error: (10/05/2013 02:37:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 62 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/24/2012 11:36:49 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 517670 seconds with 5340 seconds of active time.  This session ended with a crash.

Error: (04/16/2012 08:28:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 267918 seconds with 420 seconds of active time.  This session ended with a crash.

Error: (03/16/2012 09:59:13 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 45 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 10:01:33 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 09:57:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/17/2011 07:14:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/06/2011 01:46:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/11/2011 03:38:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 3653 seconds with 600 seconds of active time.  This session ended with a crash.

Error: (11/01/2011 05:54:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6565.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10863 seconds with 4200 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 63%
Total physical RAM: 3003.96 MB
Available physical RAM: 1083.46 MB
Total Pagefile: 5982.22 MB
Available Pagefile: 3448.04 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.07 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:230.87 GB) (Free:55.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8E8668DD)
Partition 1: (Not Active) - (Size=2 GB) - (Type=27)
Partition 2: (Active) - (Size=230.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

wieburanda · 27.12.2014, 14:45

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-12-2014
Ran by will at 2014-12-27 14:27:00
Running from C:\Users\will\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
7500_7600_7700_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
7-Zip 9.21beta (HKLM\...\7-Zip) (Version:  - )
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advanced System Optimizer (HKLM\...\{A1E21995-127E-4B7F-8C4D-CB04AA8A58EF}_is1) (Version: 3.6.1000.15950 - Systweak Software)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.14452 - systweak.com) <==== ATTENTION
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
AFPL Ghostscript 8.54 (HKLM\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM\...\AFPL Ghostscript Fonts) (Version:  - )
AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audioro iPod Converter 3 (HKLM\...\Audioro iPod Converter) (Version: 3 - Red Kawa)
Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1500}) (Version: 12.21.0.3945 - APN, LLC)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.4.37268 - Ask.com) <==== ATTENTION
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bid-O-Matic v2.14.12 (HKLM\...\Bid-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
bitcontrol® MPEG Video Decoder v3.0 (HKLM\...\bcMPEG2dec) (Version: 3.0 - BitCtrl Systems GmbH)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v6.00.05(FSC) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BPD_HPSU (Version: 1.00.0000 - Hewlett-Packard) Hidden
BPD_Scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 82.0.173.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Citrix XenApp Plugin for Hosted Apps (HKLM\...\{388C130B-0079-46B4-A0D5-DC2DD7A89A7B}) (Version: 11.0.0.5357 - Citrix Systems, Inc.)
Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden
CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
D45V120 (HKLM\...\{3BB9419A-CC71-4C2F-80D4-B7AC18D43268}_is1) (Version:  - FTS)
Destination Component (Version: 090.000.091.086 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Disk Speedup (HKLM\...\{FC7E771F-8170-4573-825D-EDB6723C804F}_is1) (Version: 3.2.0.16503 - Systweak Software)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.24 - DivX, LLC)
DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Educazione Stradale per la Scuola 2003 (HKLM\...\Educazione Stradale per la Scuola 2003) (Version:  - )
EOS USB WIA Driver (HKLM\...\EOS USB WIA Driver) (Version: 6.0.0.4 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
e-Wörterbücher (HKLM\...\{4737AD9F-13AA-4E4C-B86F-B631D557F6A7}) (Version:  - )
Fax (Version: 120.0.194.000 - Hewlett-Packard) Hidden
FlashLynx Video Download Software (HKLM\...\FlashLynx) (Version:  - NCH Software)
FortiClient Connect SSLVPN v4.0.2143 (HKLM\...\{A34DCE59-0004-0000-2143-3F8A9926B752}) (Version: 4.0.2143 - Fortinet Inc.)
Free M4a to MP3 Converter 7.2 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
getPlus(R) for Adobe (HKLM\...\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}) (Version: 1.5.2.35 - NOS Microsystems Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP)
HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP)
HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP)
HP Officejet Pro All-In-One Series (HKLM\...\{868EA922-5675-4E91-BDA6-BBD0F923C5EF}) (Version: 1.0 - HP)
HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
HP Photosmart.All-In-One Driver Software 8.0 .A (HKLM\...\{282E5AB2-8E47-4571-B6FA-6B512555B557}) (Version: 8.0 - HP)
HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Japanese Fonts Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5760-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
Java 7 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.400 - Oracle)
JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.11.02 - JMicron Technology Corp.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L7700 (Version: 50.0.165.000 - Hewlett-Packard) Hidden
Langenscheidt Grammatiktrainer Englisch (HKLM\...\Grammatiktrainer Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 1 Englisch (HKLM\...\Kurs 1 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 2 Englisch (HKLM\...\Kurs 2 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Vokabeltrainer 3.0 Englisch (HKLM\...\{138B4B3C-09D9-4026-AC33-998E8E5B2FEE}) (Version: 3.0.12 - Langenscheidt)
Launch Manager V1.4.9 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.4.9 - Wistron Corp.)
lingDIALOG (HKLM\...\{627C5AC0-772C-4661-B696-42E04AEB1872}) (Version: 2.00.0010 - LingCom GmbH)
MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden
MI-7200L Wireless Laser Mouse (HKLM\...\{235C3A50-559F-4CAA-BAC3-4CC9ABF51976}) (Version: 1.00.4 Build 050111 - Trust)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2742597) (HKLM\...\M2742597) (Version:  - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Standard 2007 (HKLM\...\STANDARD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc)
MPM (HKLM\...\{8F968232-15C6-4872-84C2-9FCDAA1AEAB6}) (Version: 1.00.0000 - Hewlett-Packard)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM\...\{e2bfefde-f5cb-4367-aa60-5bd209dd6d88}) (Version:  - Nero AG)
Network (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{25CFEF55-A945-41FC-86ED-76469F31DF37}) (Version: 7.1.41.0 - Nokia)
Nokia Home Media Server (HKLM\...\{0EEB3C40-2A8C-4045-B3F9-13C4A5C490C0}) (Version: 1.0.174 - Nokia)
Nokia Map Loader (HKLM\...\{45D4F727-43B5-49CD-B474-B9866A8F4FB8}) (Version: 3.0.22 - Nokia)
Nokia Music (HKLM\...\{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}) (Version: 1.1.1203 - Nokia Music)
Nokia Ovi Suite (HKLM\...\Nokia Ovi Suite) (Version: 3.1.0.91 - Nokia)
Nokia Ovi Suite (Version: 3.1.0.91 - Nokia) Hidden
Nokia Ovi Suite Software Updater (HKLM\...\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}) (Version: 02.07.004.45780 - Nokia Corporation)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.60.0 - Nokia)
Nokia PC Suite (Version: 7.1.60.0 - Nokia) Hidden
Nokia Photos (HKLM\...\{EB938616-16BB-491E-A5A0-CA4AB4167BB4}) (Version: 1.6.103 - Nokia)
Nokia Software Updater (HKLM\...\{4D568C38-0552-4CDD-A643-01FAFA2957EF}) (Version: 02.06.006.44298 - Nokia Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Ovi Desktop Sync Engine (Version: 1.5.257.0 - Nokia) Hidden
OviMPlatform (Version: 2.7.66.0 - Nokia) Hidden
PC Connectivity Solution (HKLM\...\{3DE96337-68D2-48E0-A863-6E4A5CD3BC25}) (Version: 11.4.16.0 - Nokia)
pgcchelper (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\pgcchelper) (Version:  - ) <==== ATTENTION
PHOTOfunSTUDIO HD Edition (HKLM\...\{9A9DBEBC-C800-4776-A970-D76D6AA405B1}) (Version: 3.00.126 - Panasonic)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RealDownloader (Version: 1.3.1 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 106.10.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Revo Uninstaller 1.93 (HKLM\...\Revo Uninstaller) (Version: 1.93 - VS Revo Group)
Rhapsody Player Engine (HKLM\...\{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}) (Version: 1.1.0 - RealNetworks)
Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.5.2 - Synaptics Incorporated)
SystemDiagnostics (HKLM\...\{2F04C9DA-94DA-4361-8B34-02CD8187861F}) (Version: 2.02.0004 - Fujitsu Siemens Computers       )
SystemTweaker (HKLM\...\{DBB1F4ED-3212-4F58-A427-9C01DE4A24A5}_is1) (Version: 2.0.7.0 - Uniblue Systems Ltd)
Systweak PhotoStudio 2.1 (HKLM\...\PhotoStudio_4281508C_4DA1_4d4e_81EB_725D55EC30DC_is1) (Version: 2.1.2954.85 - Systweak Inc.)
Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden
TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden
TuneUp Companion 2.4.8.5 (HKLM\...\TuneUpMedia) (Version: 2.4.8.5 - TuneUp Media, Inc.)
Tuneup Pro (HKLM\...\Tuneup Pro_is1) (Version: 1.08 - tuneuppro.com)
Uniblue SpeedUpMyPC (HKLM\...\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1) (Version:  - Uniblue Systems Ltd) <==== ATTENTION
Unity Web Player (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VideoPad Videobearbeitungs-Software (HKLM\...\VideoPad) (Version:  - NCH Software)
Videora iPod Converter 6 (HKLM\...\Videora iPod Converter) (Version: 6 - Red Kawa)
VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team)
VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Vokabeltrainer-Update 3.0.32 (HKLM\...\{782F20EF-AEB4-4062-9614-750FE8FD2542}) (Version: 3.0.32 - Langenscheidt)
WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden
webssearches uninstaller (HKLM\...\webssearches uninstaller) (Version:  - webssearches) <==== ATTENTION
Windows Driver Package - Nokia Modem  (06/09/2010 7.01.0.8) (HKLM\...\E5372C32E8562C76C24DBA6525002B1031495F34) (Version: 06/09/2010 7.01.0.8 - Nokia)
Windows Driver Package - Nokia Modem  (10/07/2010 4.6) (HKLM\...\6DA48AFDE796708D5A4C9121A83E7617A63A9A15) (Version: 10/07/2010 4.6 - Nokia)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
YouRiding FREESKI II version 1.005 (HKLM\...\{0C59CB32-93D5-4C2F-816A-2B53806F1086}_is1) (Version: 1.005 - Intellysurf)
YouTube Downloader Toolbar v4.6 (HKLM\...\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7}) (Version: 4.6 - Spigot, Inc.) <==== ATTENTION
YTD Video Downloader 3.9.6 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 3.9.6 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{00b7e0ab-817a-44ad-a04b-d1148d524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.2.183.39\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}\InprocServer32 -> C:\Windows\system32\TosBtShell.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{7c6e29bc-8b8b-4c3d-859e-af6cd158be0f}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c0-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c1-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c2-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c3-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c4-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c5-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c8-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c9-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969ca-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969d6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dc67367a-8b15-47bc-b7f8-0ba0435a504a}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dcedfcbf-c7d1-4b81-a20f-7524d306135e}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File

==================== Restore Points  =========================

23-12-2014 03:00:14 Windows Update
23-12-2014 07:05:57 Windows Update
24-12-2014 00:31:43 Windows Update
24-12-2014 17:56:31 Windows Update
25-12-2014 00:14:55 Windows Update
26-12-2014 00:30:45 Windows Update
27-12-2014 01:07:55 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2013-03-05 12:52 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FA159B-8BDE-4806-A35E-39C0DA0DDA43} - System32\Tasks\{070FAD29-CAED-47CC-B722-7C20DFCC20E2} => pcalua.exe -a F:\PSetup.exe -d F:\ -c /continue /uionlyifneeded
Task: {0D218EA4-7810-47D9-A699-CBFD670500C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0E05EC16-618B-4DDC-94AF-0812EF989E0C} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18] (Google)
Task: {0F8F09D8-C071-488E-959C-32BCF9456382} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {1202794D-B8E0-4A9F-A26B-AF9403D2A4A4} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {20612687-EF77-48D4-96E4-BC498100A5F0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {24B1FFEF-ADAF-49B4-985F-D7287515A755} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {38CB697F-A221-4ABF-AB35-817E514D27A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {3FD4A11E-93D1-4E5A-8F13-3B15343B5CB1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {4043966B-0CDA-461B-8411-F479D95BB9FF} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files\ASP\AdvancedSystemProtector.exe [2014-12-09] () <==== ATTENTION
Task: {4B6D91B8-0F82-41F2-BD7C-18222D02A1A7} - System32\Tasks\Tuneup Pro_DEFAULT => C:\Program Files\Tuneup Pro\TuneupPro.exe [2014-08-05] (Tuneup Pro)
Task: {52237933-4956-4CC0-97FE-3BBFA041FEC6} - System32\Tasks\ASO-OneClickCare => C:\Program Files\Advanced System Optimizer 3\ASO3.exe [2014-07-02] (Systweak Software, (www.systweak.com))
Task: {5414A3BF-F1B7-4244-8001-F7EC3C3EBE3C} - System32\Tasks\ASO-AutoCheckUpdate7Days => C:\Program Files\Advanced System Optimizer 3\CheckUpdate.exe [2014-07-02] (Systweak Software, (www.systweak.com))
Task: {5FE1355E-6DF3-4AEF-97C4-9F70AFE2DDE3} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {763F2A46-A5C2-4618-8988-AE8A7BBAAFCC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {7C36CE27-570C-454F-87E3-7F7AE10EECC9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {85E7E746-62C1-49CE-9CC7-24C0B9164C57} - System32\Tasks\{417ECCC3-2266-40FE-AFE0-788684847D58} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.64.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {983B05C1-9887-4CE9-8F4A-4536E7E6450E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A0271E82-79C3-4313-8203-5EC8608A9627} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A1518B6F-45D4-4188-9D53-0144D1B6DCF5} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {A5281EAC-8134-4018-A9A1-A4D1E51F7ACB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {A60FE53C-609F-4630-9784-44FC25A55297} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {AD884842-611D-4845-8046-72C5CF5BE993} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe
Task: {D1EAD5A0-6B72-44B2-8CB5-79E97A494D5B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {E638CA1C-E155-40A8-AE5D-D8D09D7C33B6} - System32\Tasks\Tuneup Pro_UPDATES => C:\Program Files\Tuneup Pro\TuneupPro.exe [2014-08-05] (Tuneup Pro)
Task: {E7D471DD-B58A-4175-9DA9-0C53071F2156} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASO-AutoCheckUpdate7Days.job => C:\Program Files\Advanced System Optimizer 3\CheckUpdate.exe
Task: C:\Windows\Tasks\ASO-OneClickCare.job => C:\Program Files\Advanced System Optimizer 3\ASO3.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\Tuneup Pro_DEFAULT.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
Task: C:\Windows\Tasks\Tuneup Pro_UPDATES.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2009-05-07 13:42 - 2008-02-25 19:23 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-06 01:21 - 2013-03-06 01:21 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-03-06 10:37 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-03-06 10:37 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2013-03-06 10:37 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2014-08-18 14:01 - 2014-12-09 13:48 - 06715176 _____ () C:\Program Files\ASP\AdvancedSystemProtector.exe
2014-08-18 14:01 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\ASP\System.Data.SQLite.dll
2014-08-18 14:01 - 2014-12-09 13:48 - 01730856 _____ () C:\Program Files\ASP\aspsys.dll
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-08-21 07:37 - 2013-08-21 07:37 - 00465920 _____ () C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe
2005-07-22 19:30 - 2005-07-22 19:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-27 12:10 - 2014-12-27 12:10 - 00043008 _____ () c:\users\will\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0anmac.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2011-02-08 13:51 - 2010-12-15 12:41 - 00477080 _____ () C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2009-02-26 10:46 - 2009-02-26 10:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 08:46 - 2011-06-22 08:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-12-12 18:14 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-12 18:14 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0D786AE3
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: PCToolsSSDMonitorSvc => 2
MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

========================= Accounts: ==========================

Administrator (S-1-5-21-1275960161-2095831957-4263473684-500 - Administrator - Disabled) => C:\Users\Administrator
ASPNET (S-1-5-21-1275960161-2095831957-4263473684-1002 - Limited - Enabled)
Guest (S-1-5-21-1275960161-2095831957-4263473684-501 - Limited - Disabled)
will (S-1-5-21-1275960161-2095831957-4263473684-1000 - Administrator - Enabled) => C:\Users\will

==================== Faulty Device Manager Devices =============

Name: JMicron OHCI Compliant IEEE 1394 Host Controller
Description: JMicron OHCI Compliant IEEE 1394 Host Controller
Class Guid: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
Manufacturer: JMicron Technology Corp.
Service: ohci1394
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/27/2014 00:12:29 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/27/2014 00:05:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/27/2014 01:09:44 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (12/27/2014 01:09:38 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.

Error: (12/26/2014 10:09:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 39.0.2171.95, time stamp 0x548243f3, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0xe8fffd80,
process id 0x11bc, application start time 0xchrome.exe0.

Error: (12/26/2014 11:01:53 AM) (Source: Chrome) (EventID: 1) (User: NT AUTHORITY)
Description: Chrome has encountered a fatal error.
ver=39.0.2171.95;lang=;guid=E0CC318678244B098EFED8B75EFCBAFC;is_machine=1;oop=1;upload=1;minidump=C:\Program Files\Google\CrashReports\711c5094-1f4b-4370-85b8-f0dead6bcf94.dmp

Error: (12/26/2014 09:15:48 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/26/2014 09:09:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2014 00:32:28 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (12/26/2014 00:32:18 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.


System errors:
=============
Error: (12/27/2014 00:22:54 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (12/27/2014 00:13:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Windows Update

Error: (12/27/2014 00:07:31 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (12/27/2014 00:05:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (12/27/2014 01:09:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: 0x80070643Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941){343E12E8-8772-4A72-9982-570122E959DB}203

Error: (12/26/2014 09:22:56 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (12/26/2014 09:14:53 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error: (12/26/2014 09:14:30 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: iPod Service%%2147549465

Error: (12/26/2014 09:14:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (12/26/2014 09:11:35 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service


Microsoft Office Sessions:
=========================
Error: (10/05/2013 02:37:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 62 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/24/2012 11:36:49 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 517670 seconds with 5340 seconds of active time.  This session ended with a crash.

Error: (04/16/2012 08:28:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 267918 seconds with 420 seconds of active time.  This session ended with a crash.

Error: (03/16/2012 09:59:13 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 45 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 10:01:33 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 09:57:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/17/2011 07:14:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/06/2011 01:46:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/11/2011 03:38:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 3653 seconds with 600 seconds of active time.  This session ended with a crash.

Error: (11/01/2011 05:54:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6565.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10863 seconds with 4200 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 63%
Total physical RAM: 3003.96 MB
Available physical RAM: 1083.46 MB
Total Pagefile: 5982.22 MB
Available Pagefile: 3448.04 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.07 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:230.87 GB) (Free:55.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8E8668DD)
Partition 1: (Not Active) - (Size=2 GB) - (Type=27)
Partition 2: (Active) - (Size=230.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-12-2014
Ran by will (administrator) on WILL-PC on 27-12-2014 14:24:47
Running from C:\Users\will\Downloads
Loaded Profile: will (Available profiles: will & Administrator)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Systweak Software, (www.systweak.com)) C:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe
(MS) C:\Program Files\LSM\aus.exe
(ArcSoft, Inc.) C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe
(B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Systweak Software.) C:\Program Files\Disk Speedup\DSUDefragSrv.exe
(Fortinet Inc.) C:\Windows\System32\FortiSSLVPNdaemon.exe
(MS) C:\Program Files\LSM\lsm.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Fujitsu Siemens Computers) C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files\ASP\AdvancedSystemProtector.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(MS) C:\Program Files\LSM\lsm.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1996072 2013-03-01] (Synaptics Incorporated)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2009-10-26] (Motorola Inc.)
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [192512 2007-07-26] (Wistron)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-21] (APN)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-06-17] (Realtek Semiconductor)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [pgcchelper] => C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe [465920 2013-08-21] ()
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Bubble Dock] => "C:\Users\will\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Google Update] => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30521952 2014-11-24] (Skype Technologies S.A.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {b8e7d562-a735-11de-a513-000df05f8e4b} - .\MigWiz\migsetup.exe
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {e56a9566-e159-11de-9981-000df05f8e4b} - SYSTEM\G-923-321232-3232-32211-23\memory.exe
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\PROGRA~1\SupTab\SEARCH~1.DLL File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP SimpleSave Monitor.lnk
ShortcutTarget: HP SimpleSave Monitor.lnk -> C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe ()
BootExecute: sasnative32autocheck autochk * ROBoot

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-1275960161-2095831957-4263473684-1000] => proxy1.emirates.net.ae:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp
URLSearchHook: HKLM - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5012_7&babsrc=SP_ss&mntrId=e8cf939000000000000000225f148849
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5012_7&babsrc=SP_ss&mntrId=e8cf939000000000000000225f148849
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6CFEC6DA-2FA2-4959-809B-460F97521EE5} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {AAD4C5B3-637E-4907-8F64-74FCEDCA6498} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10267&src=crm&q={searchTerms}&locale=de_IT&apn_ptnrs=^AGY&apn_dtid=^YYYYYY^YY^IT&apn_uid=bb20af7d-a604-4ef2-9454-c948df1deb3f&apn_sauid=C63C5408-A420-4FE3-8C0C-667C8A9B4B4A
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: No Name -> {D4027C7F-154A-4066-A1AD-4243D8127440} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 38 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA5BE45F-BBEC-4ACC-9728-C8E488EB145B}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @FortinetCacheClean -> C:\Program Files\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
FF Plugin: @FortinetTunnelControl -> C:\Program Files\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.1 -> C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/O1DPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=3 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=9 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-05-07]
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2011-06-11]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-02-18]
FF HKLM\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-05-21]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-06-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.searchnu.com/421
CHR StartupUrls: Default -> "hxxp://www.searchnu.com/421", "hxxp://www.claro-search.com/?affID=117423&tt=5012_7&babsrc=HP_ss&mntrId=e8cf939000000000000000225f148849", "hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\will\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-10-14]
CHR Extension: (Google Docs) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]
CHR Extension: (Google Drive) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-06]
CHR Extension: (YouTube) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]
CHR Extension: (Adblock Plus) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-26]
CHR Extension: (Google Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]
CHR Extension: (JavaScript Popup Blocker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2014-12-22]
CHR Extension: (RealDownloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-03-06]
CHR Extension: (Google Wallet) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-06]
CHR Extension: (Gmail) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-03-06]
CHR HKLM\...\Chrome\Extension: [kbjlipmgfoamgjaogmbihaffnpkpjajp] - C:\Program Files\Nosibay\Bubble Dock\extensions\GCSurfMatch.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-02-07]
CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 ASO3DiskOptimizer; C:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe [241472 2014-07-02] (Systweak Software, (www.systweak.com))
R2 AUS; C:\Program Files\LSM\aus.exe [287744 2014-02-22] (MS) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BackupService; C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [83512 2010-07-01] (ArcSoft, Inc.)
R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [145504 2007-06-15] (B.H.A Corporation)
R2 DSUDiskOptimizer; C:\Program Files\Disk Speedup\DSUDefragSrv.exe [669456 2014-12-16] (Systweak Software.)
R2 FortiSslvpnDaemon; C:\Windows\system32\FortiSSLVPNdaemon.exe [825960 2011-06-14] (Fortinet Inc.)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [630784 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 Log S.M.; C:\Program Files\LSM\lsm.exe [428032 2014-02-22] (MS) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) [File not signed]
R2 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [303104 2008-04-25] (Fujitsu Siemens Computers) [File not signed]
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118784 2006-11-18] (Wistron Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-21] (Microsoft Corporation)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 cdrbsdrv; C:\Windows\system32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) [File not signed]
R3 HidMouse; C:\Windows\System32\Drivers\HidMouse.sys [25856 2005-03-14] (Hama) [File not signed]
R1 Hotkey; C:\Windows\system32\Drivers\Hotkey.sys [9867 2003-04-28] () [File not signed]
S3 johci; C:\Windows\System32\DRIVERS\johci.sys [23136 2012-07-16] (JMicron Technology Corp.)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [6144 2007-01-09] (Chic)
S3 pppop; C:\Windows\System32\DRIVERS\pppop.sys [36384 2009-07-21] (Fortinet Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26112 2011-04-26] (The OpenVPN Project) [File not signed]
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2010-01-09] (AnchorFree Inc)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 14:24 - 2014-12-27 14:26 - 00036119 _____ () C:\Users\will\Downloads\FRST.txt
2014-12-27 14:24 - 2014-12-27 14:24 - 00000000 ____D () C:\FRST
2014-12-27 14:23 - 2014-12-27 14:23 - 01114624 _____ (Farbar) C:\Users\will\Downloads\FRST.exe
2014-12-23 12:52 - 2014-12-23 12:52 - 00000580 _____ () C:\Windows\PFRO.log
2014-12-22 21:13 - 2014-12-22 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-22 21:12 - 2014-12-22 21:12 - 05317104 _____ (Piriform Ltd) C:\Users\will\Downloads\ccsetup501.exe
2014-12-13 10:33 - 2014-12-13 10:33 - 00001004 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-12 13:20 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 13:20 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 12:50 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-11 06:47 - 2014-11-14 08:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-11 06:47 - 2014-11-14 08:13 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 06004224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 11083264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 02006016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-11 06:47 - 2014-11-14 08:11 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-11 06:47 - 2014-11-14 08:09 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-12-11 06:47 - 2014-11-14 06:38 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-11 06:47 - 2014-11-14 05:00 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-11 06:47 - 2014-11-14 04:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-11 06:47 - 2014-11-14 04:58 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-11 06:47 - 2014-11-14 04:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-02 23:25 - 2014-12-02 23:25 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-12-02 23:15 - 2014-12-02 23:15 - 00016082 _____ () C:\Windows\system32\results.xml
2014-12-02 23:14 - 2014-06-17 19:27 - 03116440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-12-02 23:14 - 2014-06-17 19:18 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-12-02 23:14 - 2014-06-17 16:08 - 01205934 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-12-02 23:14 - 2014-06-17 15:42 - 64228864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-12-02 23:14 - 2014-06-13 16:24 - 02477272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-12-02 23:14 - 2014-06-11 17:08 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-12-02 23:14 - 2014-06-11 11:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-12-02 23:14 - 2014-06-09 16:57 - 02588376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-12-02 23:14 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-12-02 23:14 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-12-02 23:14 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-12-02 23:14 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-12-02 23:14 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-12-02 23:14 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-12-02 23:14 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-12-02 23:13 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-12-02 23:13 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-12-02 23:13 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-12-02 23:13 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-12-02 23:13 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-12-02 23:13 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-12-02 23:13 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-12-02 23:13 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-12-02 23:11 - 2014-06-09 13:52 - 01451712 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2014-12-02 23:11 - 2014-06-07 00:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-12-02 23:11 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-12-02 23:11 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-12-02 23:11 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-12-02 23:11 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-12-02 22:41 - 2013-07-30 15:53 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
2014-12-02 22:36 - 2014-12-02 23:27 - 00000000 ___HD () C:\Program Files\Temp
2014-12-02 22:07 - 2014-07-16 11:05 - 00582872 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-12-02 22:07 - 2014-07-16 11:05 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-12-02 22:06 - 2014-12-02 22:06 - 00000000 ____D () C:\ProgramData\Dell
2014-12-02 14:36 - 2014-12-02 22:00 - 00000000 ____D () C:\Users\will\{d5b9c712-3742-4128-bca8-4ae1dec4d16b}
2014-12-02 12:26 - 2014-12-02 12:26 - 00000000 ____D () C:\Windows\Repair
2014-11-30 20:55 - 2014-11-30 20:55 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (3).exe
2014-11-30 20:51 - 2014-11-30 20:51 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (2).exe
2014-11-30 19:59 - 2014-11-30 19:59 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\Users\will\AppData\Local\Skype
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-30 19:56 - 2014-11-30 19:56 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (1).exe
2014-11-30 18:59 - 2014-11-30 18:59 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 14:10 - 2010-01-30 15:48 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-27 14:05 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-27 14:05 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-27 13:57 - 2012-11-12 13:13 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-27 13:29 - 2011-01-14 18:11 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job
2014-12-27 13:27 - 2013-03-05 15:09 - 01749687 _____ () C:\Windows\WindowsUpdate.log
2014-12-27 12:12 - 2014-02-13 18:00 - 00000000 ___RD () C:\Users\will\Dropbox
2014-12-27 12:12 - 2014-02-13 17:57 - 00000000 ____D () C:\Users\will\AppData\Roaming\Dropbox
2014-12-27 12:10 - 2010-01-30 15:48 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-27 12:07 - 2013-03-06 10:37 - 00000620 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-12-27 12:05 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-27 01:10 - 2009-04-27 06:54 - 00004268 _____ () C:\Windows\bthservsdp.dat
2014-12-27 01:10 - 2006-11-02 13:58 - 00032600 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-27 01:06 - 2014-08-21 20:55 - 00000404 _____ () C:\Windows\Tasks\ASO-OneClickCare.job
2014-12-26 22:10 - 2010-11-08 06:31 - 00000000 ____D () C:\Users\will\AppData\Local\CrashDumps
2014-12-26 21:17 - 2011-04-17 09:27 - 00000420 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job
2014-12-26 17:29 - 2011-01-14 18:11 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job
2014-12-26 15:02 - 2014-08-18 14:01 - 00000254 _____ () C:\Windows\Tasks\Tuneup Pro_DEFAULT.job
2014-12-26 15:01 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Tuneup Pro
2014-12-26 11:50 - 2011-05-28 13:32 - 00000868 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-12-24 23:07 - 2009-05-02 19:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Apple Computer
2014-12-24 15:01 - 2014-08-18 14:01 - 00000262 _____ () C:\Windows\Tasks\Tuneup Pro_UPDATES.job
2014-12-24 00:30 - 2013-03-06 10:37 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-12-23 14:01 - 2006-11-02 11:33 - 00801496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-22 21:18 - 2014-06-23 22:39 - 00000000 ____D () C:\Users\will\AppData\Local\pgcchelper
2014-12-22 21:18 - 2013-10-13 22:57 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-12-22 21:17 - 2014-08-21 20:18 - 00001876 _____ () C:\Users\Public\Desktop\Disk Speedup.lnk
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Speedup
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\Program Files\Disk Speedup
2014-12-22 21:13 - 2013-03-05 10:25 - 00000810 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-22 21:13 - 2013-03-05 10:25 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-22 17:29 - 2009-05-09 12:50 - 00002627 _____ () C:\Users\will\Desktop\Microsoft Office Word 2007.lnk
2014-12-17 21:39 - 2009-05-03 07:05 - 00000000 ____D () C:\Users\will\AppData\Roaming\Skype
2014-12-15 16:44 - 2014-11-11 17:05 - 00000000 ____D () C:\Users\will\Documents\daniel schual
2014-12-13 11:10 - 2011-06-16 08:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-13 10:54 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-12-13 10:34 - 2014-08-16 19:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-13 10:33 - 2013-10-13 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-12 18:14 - 2013-03-06 09:57 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-12 13:22 - 2008-04-30 05:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 13:17 - 2013-08-15 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-12 12:53 - 2006-11-02 11:24 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-12-12 12:42 - 2014-02-13 18:00 - 00000922 _____ () C:\Users\will\Desktop\Dropbox.lnk
2014-12-12 12:42 - 2014-02-13 17:58 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-10 14:57 - 2012-11-12 13:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-10 14:57 - 2011-07-10 07:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-10 14:53 - 2014-08-18 14:01 - 00000000 ____D () C:\Program Files\ASP
2014-12-10 14:00 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-12-10 13:59 - 2014-08-18 14:01 - 00000844 _____ () C:\Users\Public\Desktop\Advanced-System Protector.lnk
2014-12-10 13:59 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\systweak
2014-12-10 13:59 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-02 23:22 - 2009-04-26 21:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-12-02 23:15 - 2009-04-26 21:14 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-12-02 23:11 - 2009-04-27 06:56 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-02 23:10 - 2014-08-21 20:55 - 00000434 _____ () C:\Windows\Tasks\ASO-AutoCheckUpdate7Days.job
2014-12-02 23:05 - 2014-11-06 19:58 - 00002228 _____ () C:\Windows\system32\ASOROSet.bin
2014-12-02 23:05 - 2014-06-23 22:40 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2014-12-02 23:05 - 2011-05-28 10:13 - 00000000 ____D () C:\temp
2014-12-02 23:05 - 2009-04-26 21:17 - 00000000 ____D () C:\Users\will
2014-12-02 22:41 - 2011-05-29 13:37 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:08 - 2011-02-05 00:03 - 00000000 ____D () C:\Intel
2014-12-02 22:07 - 2009-04-26 21:14 - 00000000 ____D () C:\Program Files\Realtek
2014-11-30 20:57 - 2009-05-03 21:24 - 00000000 ____D () C:\ProgramData\Skype
2014-11-30 19:59 - 2014-03-06 20:01 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-11-30 19:59 - 2011-07-20 08:22 - 00000000 ___RD () C:\Program Files\Skype
2014-11-27 19:33 - 2009-04-27 09:40 - 00080896 _____ () C:\Users\will\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Files to move or delete:
====================
C:\ProgramData\ezsid.dat
C:\Users\will\SslvpnClient.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\temp\avgnt.exe
C:\Users\Administrator\AppData\Local\temp\NEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\uninst1.exe
C:\Users\will\AppData\Local\temp\avgnt.exe
C:\Users\will\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0anmac.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-27 12:26

==================== End Of Log ============================

--- --- ---

--- --- ---

Bootsektor · 27.12.2014, 22:56

Hallo,

sieht ja doch etwas unübersichtlich aus, bei dir. Sollten wir aufräumen

Ich lege dir ans Herz dir einen anderen Antivirenscanner zu suchen.

Und Finger weg von RegistryCleaner, PC-Tuning Software, macht mehr kaputt als schneller.
Schritt 1
Bitte deinstalliere folgende Programme:

Advanced System Optimizer
Advanced-System Protector
Java 7 Update 40
pgcchelper
TuneUp Companion 2.4.8.5
Tuneup Pro
Uniblue SpeedUpMyPC
webssearches uninstaller
YouTube Downloader Toolbar v4.6
YTD Video Downloader 3.9.6

Dazu gehe auf
Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> suche das Programm in der Liste --> entfernen

Falls du ein Programm nicht deinstallieren kannst, lade dir von hier den Revo-uninstaller herunter und deinstalliere es damit, wähle dabei den moderaten Modus.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

wieburanda · 28.12.2014, 17:54

Hallo Sandra,
here we go...

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-12-2014
Ran by will (administrator) on WILL-PC on 28-12-2014 17:39:58
Running from c:\Users\will\Downloads
Loaded Profile: will (Available profiles: will & Administrator)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Users\will\AppData\Local\temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(MS) C:\Program Files\LSM\aus.exe
(ArcSoft, Inc.) C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe
(B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Systweak Software.) C:\Program Files\Disk Speedup\DSUDefragSrv.exe
(Fortinet Inc.) C:\Windows\System32\FortiSSLVPNdaemon.exe
(MS) C:\Program Files\LSM\lsm.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(MS) C:\Program Files\LSM\lsm.exe
(Fujitsu Siemens Computers) C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(www.bid-o-matic.org) C:\Program Files\Bid-O-Matic\Biet-O-Matic.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1996072 2013-03-01] (Synaptics Incorporated)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2009-10-26] (Motorola Inc.)
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [192512 2007-07-26] (Wistron)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-21] (APN)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-06-17] (Realtek Semiconductor)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Ocs_SM] => C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2014-12-28] (OCS)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [pgcchelper] => C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Bubble Dock] => "C:\Users\will\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Google Update] => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30521952 2014-11-24] (Skype Technologies S.A.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {b8e7d562-a735-11de-a513-000df05f8e4b} - .\MigWiz\migsetup.exe
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {e56a9566-e159-11de-9981-000df05f8e4b} - SYSTEM\G-923-321232-3232-32211-23\memory.exe
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\PROGRA~1\SupTab\SEARCH~1.DLL File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP SimpleSave Monitor.lnk
ShortcutTarget: HP SimpleSave Monitor.lnk -> C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe ()
BootExecute: sasnative32autocheck autochk * ROBoot

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-1275960161-2095831957-4263473684-1000] => proxy1.emirates.net.ae:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.firetab.org/?type=ds3hp
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX&q={searchTerms}
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp
URLSearchHook: HKLM - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
SearchScopes: HKLM -> DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org/?type=ds3se&p={searchTerms}
SearchScopes: HKLM -> {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org/?type=ds3se&p={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org.anonymize-me.de/?anonymto=687474703A2F2F7777772E666972657461622E6F72672F3F747970653D647333736526703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E636C61726F2D7365617263682E636F6D2F3F713D7B7365617263685465726D737D2661666649443D3131373432332674743D353031325F37266261627372633D53505F7373266D6E747249643D6538636639333930303030303030303030303030303032323566313438383439&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {49C13559-0551-4BC3-9F89-1996EF7FE1ED} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {5E1F4A4E-F59C-4A89-A2E3-2D03A1477675} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E67756167657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26736F7572636569643D69653726726C7A3D314937414442465F656E2D47424145333235&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6CFEC6DA-2FA2-4959-809B-460F97521EE5} URL = hxxp://search.yahoo.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7961686F6F2E636F6D2F7365617263683F66723D6368722D677265656E747265655F69652665693D7574662D3826747970653D39333738313126703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org.anonymize-me.de/?anonymto=687474703A2F2F7777772E666972657461622E6F72672F3F747970653D647333736526703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {97A06503-E32B-48FD-9391-F83B0694720A} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com.anonymize-me.de/?anonymto=687474703A2F2F6474732E7365617263682D726573756C74732E636F6D2F73723F7372633D6965622661707069643D3130312673797374656D69643D3432312673723D3026713D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {A81958B7-BB39-498C-A3B3-1E2E31671936} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {AAD4C5B3-637E-4907-8F64-74FCEDCA6498} URL = hxxp://websearch.ask.com.anonymize-me.de/?anonymto=687474703A2F2F7765627365617263682E61736B2E636F6D2F72656469726563743F636C69656E743D69652674623D4156522D34266F3D41504E3130323637267372633D63726D26713D7B7365617263685465726D737D266C6F63616C653D64655F49542661706E5F70746E72733D5E4147592661706E5F647469643D5E5959595959595E59595E49542661706E5F7569643D62623230616637642D613630342D346566322D393435342D6339343864663164656233662661706E5F73617569643D43363343353430382D413432302D344645332D384330432D363637433841394234423441&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636F6E647569742E636F6D2F526573756C74734578742E617370783F713D7B7365617263685465726D737D26536561726368536F757263653D3426637469643D435432343331323435&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {B6802D0A-27DC-4843-8027-92685EC89F3E} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {F8CD1806-E05C-4928-B093-B813C62FE272} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File
BHO: PriceSparrow -> {3F2DC1E7-A56F-49D8-B0CF-DB2300594497} -> C:\Program Files\PriceSparrow\Internet Explorer\pricesparrow.dll ()
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: No Name -> {D4027C7F-154A-4066-A1AD-4243D8127440} ->  No File
Toolbar: HKLM - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 38 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA5BE45F-BBEC-4ACC-9728-C8E488EB145B}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @FortinetCacheClean -> C:\Program Files\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
FF Plugin: @FortinetTunnelControl -> C:\Program Files\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.1 -> C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/O1DPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=3 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=9 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-05-07]
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2011-06-11]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-02-18]
FF HKLM\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-05-21]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-06-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.searchnu.com/421
CHR StartupUrls: Default -> "hxxp://www.searchnu.com/421", "hxxp://www.claro-search.com/?affID=117423&tt=5012_7&babsrc=HP_ss&mntrId=e8cf939000000000000000225f148849", "hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\will\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-10-14]
CHR Extension: (Google Docs) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]
CHR Extension: (Google Drive) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-06]
CHR Extension: (YouTube) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]
CHR Extension: (Adblock Plus) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-26]
CHR Extension: (Google Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]
CHR Extension: (JavaScript Popup Blocker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2014-12-22]
CHR Extension: (RealDownloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-21]
CHR Extension: (PriceSparrow) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kljkanaekoongefljnjbghkgjjocmikm [2014-12-28]
CHR Extension: (Skype Click to Call) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-03-06]
CHR Extension: (Google Wallet) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-06]
CHR Extension: (Gmail) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-03-06]
CHR HKLM\...\Chrome\Extension: [kbjlipmgfoamgjaogmbihaffnpkpjajp] - C:\Program Files\Nosibay\Bubble Dock\extensions\GCSurfMatch.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [kljkanaekoongefljnjbghkgjjocmikm] - C:\Program Files\PriceSparrow\Chrome\pricesparrow-1.4.9.crx [2013-03-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-02-07]
CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AddonsHelper; C:\Users\will\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe [896512 2014-12-28] () [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AUS; C:\Program Files\LSM\aus.exe [287744 2014-02-22] (MS) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BackupService; C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [83512 2010-07-01] (ArcSoft, Inc.)
R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [145504 2007-06-15] (B.H.A Corporation)
R2 DSUDiskOptimizer; C:\Program Files\Disk Speedup\DSUDefragSrv.exe [669456 2014-12-16] (Systweak Software.)
R2 FortiSslvpnDaemon; C:\Windows\system32\FortiSSLVPNdaemon.exe [825960 2011-06-14] (Fortinet Inc.)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [630784 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 Log S.M.; C:\Program Files\LSM\lsm.exe [428032 2014-02-22] (MS) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 SearchAnonymizer; C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2014-12-28] () [File not signed]
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) [File not signed]
R2 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [303104 2008-04-25] (Fujitsu Siemens Computers) [File not signed]
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118784 2006-11-18] (Wistron Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-21] (Microsoft Corporation)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 cdrbsdrv; C:\Windows\system32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) [File not signed]
R3 HidMouse; C:\Windows\System32\Drivers\HidMouse.sys [25856 2005-03-14] (Hama) [File not signed]
R1 Hotkey; C:\Windows\system32\Drivers\Hotkey.sys [9867 2003-04-28] () [File not signed]
S3 johci; C:\Windows\System32\DRIVERS\johci.sys [23136 2012-07-16] (JMicron Technology Corp.)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-12-28] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [6144 2007-01-09] (Chic)
S3 pppop; C:\Windows\System32\DRIVERS\pppop.sys [36384 2009-07-21] (Fortinet Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26112 2011-04-26] (The OpenVPN Project) [File not signed]
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2010-01-09] (AnchorFree Inc)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 17:33 - 2014-12-28 17:33 - 00001946 _____ () C:\Users\will\Desktop\mbam.txt
2014-12-28 16:35 - 2014-12-28 17:25 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 16:35 - 2014-12-28 16:35 - 00000905 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-12-28 16:35 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-28 16:35 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-28 16:35 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-28 16:27 - 2014-12-28 16:27 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\will\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-28 16:13 - 2014-12-28 16:13 - 00000780 _____ () C:\Users\will\Downloads\AdwCleaner_4.106.exe - Shortcut.lnk
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\Users\will\AppData\Roaming\Opera
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\ProgramData\DNSErrorHelper
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\Program Files\PriceSparrow
2014-12-28 15:52 - 2014-12-28 17:18 - 00000792 _____ () C:\Windows\Tasks\At1.job
2014-12-28 15:52 - 2014-12-28 15:52 - 00000000 ____D () C:\Users\will\AppData\Roaming\OCS
2014-12-28 13:09 - 2014-12-28 13:09 - 02173952 _____ () C:\Users\will\Downloads\AdwCleaner_4.106.exe
2014-12-28 12:24 - 2014-12-28 13:12 - 00000000 ____D () C:\AdwCleaner
2014-12-28 12:10 - 2014-12-28 12:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\will\Downloads\revosetup95.exe
2014-12-28 12:10 - 2014-12-28 12:10 - 00001063 _____ () C:\Users\will\Desktop\Revo Uninstaller.lnk
2014-12-28 11:53 - 2014-12-28 11:59 - 00001106 _____ () C:\Users\will\Desktop\Live PC Help.lnk
2014-12-27 14:27 - 2014-12-27 14:28 - 00056017 _____ () C:\Users\will\Downloads\Addition.txt
2014-12-27 14:24 - 2014-12-28 17:40 - 00000000 ____D () C:\FRST
2014-12-27 14:24 - 2014-12-28 17:39 - 00041551 _____ () C:\Users\will\Downloads\FRST.txt
2014-12-27 14:23 - 2014-12-27 14:23 - 01114624 _____ (Farbar) C:\Users\will\Downloads\FRST.exe
2014-12-23 12:52 - 2014-12-28 17:18 - 00002336 _____ () C:\Windows\PFRO.log
2014-12-22 21:13 - 2014-12-22 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-22 21:12 - 2014-12-22 21:12 - 05317104 _____ (Piriform Ltd) C:\Users\will\Downloads\ccsetup501.exe
2014-12-13 10:33 - 2014-12-13 10:33 - 00001004 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-12 13:20 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 13:20 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 12:50 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-11 06:47 - 2014-11-14 08:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-11 06:47 - 2014-11-14 08:13 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 06004224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 11083264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 02006016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-11 06:47 - 2014-11-14 08:11 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-11 06:47 - 2014-11-14 08:09 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-12-11 06:47 - 2014-11-14 06:38 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-11 06:47 - 2014-11-14 05:00 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-11 06:47 - 2014-11-14 04:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-11 06:47 - 2014-11-14 04:58 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-11 06:47 - 2014-11-14 04:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-02 23:25 - 2014-12-02 23:25 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-12-02 23:15 - 2014-12-02 23:15 - 00016082 _____ () C:\Windows\system32\results.xml
2014-12-02 23:14 - 2014-06-17 19:27 - 03116440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-12-02 23:14 - 2014-06-17 19:18 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-12-02 23:14 - 2014-06-17 16:08 - 01205934 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-12-02 23:14 - 2014-06-17 15:42 - 64228864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-12-02 23:14 - 2014-06-13 16:24 - 02477272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-12-02 23:14 - 2014-06-11 17:08 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-12-02 23:14 - 2014-06-11 11:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-12-02 23:14 - 2014-06-09 16:57 - 02588376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-12-02 23:14 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-12-02 23:14 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-12-02 23:14 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-12-02 23:14 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-12-02 23:14 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-12-02 23:14 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-12-02 23:14 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-12-02 23:13 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-12-02 23:13 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-12-02 23:13 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-12-02 23:13 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-12-02 23:13 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-12-02 23:13 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-12-02 23:13 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-12-02 23:13 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-12-02 23:11 - 2014-06-09 13:52 - 01451712 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2014-12-02 23:11 - 2014-06-07 00:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-12-02 23:11 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-12-02 23:11 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-12-02 23:11 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-12-02 23:11 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-12-02 22:41 - 2013-07-30 15:53 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
2014-12-02 22:36 - 2014-12-02 23:27 - 00000000 ___HD () C:\Program Files\Temp
2014-12-02 22:07 - 2014-07-16 11:05 - 00582872 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-12-02 22:07 - 2014-07-16 11:05 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-12-02 22:06 - 2014-12-02 22:06 - 00000000 ____D () C:\ProgramData\Dell
2014-12-02 14:36 - 2014-12-02 22:00 - 00000000 ____D () C:\Users\will\{d5b9c712-3742-4128-bca8-4ae1dec4d16b}
2014-12-02 12:26 - 2014-12-02 12:26 - 00000000 ____D () C:\Windows\Repair
2014-11-30 20:55 - 2014-11-30 20:55 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (3).exe
2014-11-30 20:51 - 2014-11-30 20:51 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (2).exe
2014-11-30 19:59 - 2014-11-30 19:59 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\Users\will\AppData\Local\Skype
2014-11-30 19:59 - 2014-11-30 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-30 19:56 - 2014-11-30 19:56 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup (1).exe
2014-11-30 18:59 - 2014-11-30 18:59 - 01546856 _____ (Skype Technologies S.A.) C:\Users\will\Downloads\SkypeSetup.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 17:34 - 2013-08-31 13:30 - 00000000 ____D () C:\Users\will\AppData\Roaming\BOM
2014-12-28 17:32 - 2013-03-05 15:09 - 01794357 _____ () C:\Windows\WindowsUpdate.log
2014-12-28 17:29 - 2011-01-14 18:11 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job
2014-12-28 17:29 - 2011-01-14 18:11 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job
2014-12-28 17:25 - 2014-02-13 18:00 - 00000000 ___RD () C:\Users\will\Dropbox
2014-12-28 17:25 - 2014-02-13 17:57 - 00000000 ____D () C:\Users\will\AppData\Roaming\Dropbox
2014-12-28 17:20 - 2014-06-23 22:39 - 00000000 ____D () C:\Users\will\AppData\Local\pgcchelper
2014-12-28 17:20 - 2010-01-30 15:48 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-28 17:18 - 2013-03-06 10:37 - 00000620 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-12-28 17:18 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-28 17:18 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-28 17:18 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-28 17:16 - 2009-04-27 06:54 - 00004268 _____ () C:\Windows\bthservsdp.dat
2014-12-28 17:16 - 2006-11-02 13:58 - 00032600 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-28 17:10 - 2010-01-30 15:48 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-28 16:57 - 2012-11-12 13:13 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-28 16:10 - 2009-09-17 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-12-28 15:55 - 2013-08-31 13:30 - 00000835 _____ () C:\Users\Public\Desktop\Bid-O-Matic.lnk
2014-12-28 15:55 - 2013-08-31 13:30 - 00000000 ____D () C:\Program Files\Bid-O-Matic
2014-12-28 14:53 - 2009-05-03 07:05 - 00000000 ____D () C:\Users\will\AppData\Roaming\Skype
2014-12-28 12:10 - 2013-03-05 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-12-28 11:58 - 2012-07-09 21:38 - 00000000 ____D () C:\Users\will\AppData\Roaming\TuneUpMedia
2014-12-28 11:58 - 2012-06-26 04:26 - 00000000 ____D () C:\Users\will\AppData\Roaming\Mozilla
2014-12-28 11:56 - 2009-05-07 07:51 - 00000000 ____D () C:\Program Files\Java
2014-12-28 11:53 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\systweak
2014-12-28 11:53 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-28 11:50 - 2011-05-28 13:32 - 00000868 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-12-27 21:58 - 2011-04-17 09:27 - 00000420 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job
2014-12-26 22:10 - 2010-11-08 06:31 - 00000000 ____D () C:\Users\will\AppData\Local\CrashDumps
2014-12-24 23:07 - 2009-05-02 19:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Apple Computer
2014-12-24 00:30 - 2013-03-06 10:37 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-12-23 14:01 - 2006-11-02 11:33 - 00801496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-22 21:18 - 2013-10-13 22:57 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-12-22 21:17 - 2014-08-21 20:18 - 00001876 _____ () C:\Users\Public\Desktop\Disk Speedup.lnk
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Speedup
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\Program Files\Disk Speedup
2014-12-22 21:13 - 2013-03-05 10:25 - 00000810 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-22 21:13 - 2013-03-05 10:25 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-22 17:29 - 2009-05-09 12:50 - 00002627 _____ () C:\Users\will\Desktop\Microsoft Office Word 2007.lnk
2014-12-15 16:44 - 2014-11-11 17:05 - 00000000 ____D () C:\Users\will\Documents\daniel schual
2014-12-13 11:10 - 2011-06-16 08:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-13 10:54 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-12-13 10:34 - 2014-08-16 19:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-13 10:33 - 2013-10-13 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-12 18:14 - 2013-03-06 09:57 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-12 13:22 - 2008-04-30 05:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 13:17 - 2013-08-15 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-12 12:53 - 2006-11-02 11:24 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-12-12 12:42 - 2014-02-13 18:00 - 00000922 _____ () C:\Users\will\Desktop\Dropbox.lnk
2014-12-12 12:42 - 2014-02-13 17:58 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-10 14:57 - 2012-11-12 13:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-10 14:57 - 2011-07-10 07:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-02 23:22 - 2009-04-26 21:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-12-02 23:15 - 2009-04-26 21:14 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-12-02 23:11 - 2009-04-27 06:56 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-02 23:05 - 2014-11-06 19:58 - 00002228 _____ () C:\Windows\system32\ASOROSet.bin
2014-12-02 23:05 - 2014-06-23 22:40 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2014-12-02 23:05 - 2011-05-28 10:13 - 00000000 ____D () C:\temp
2014-12-02 23:05 - 2009-04-26 21:17 - 00000000 ____D () C:\Users\will
2014-12-02 22:41 - 2011-05-29 13:37 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:08 - 2011-02-05 00:03 - 00000000 ____D () C:\Intel
2014-12-02 22:07 - 2009-04-26 21:14 - 00000000 ____D () C:\Program Files\Realtek
2014-11-30 20:57 - 2009-05-03 21:24 - 00000000 ____D () C:\ProgramData\Skype
2014-11-30 19:59 - 2014-03-06 20:01 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-11-30 19:59 - 2011-07-20 08:22 - 00000000 ___RD () C:\Program Files\Skype

Files to move or delete:
====================
C:\ProgramData\ezsid.dat
C:\Users\will\SslvpnClient.exe
C:\Windows\Tasks\At1.job


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\temp\avgnt.exe
C:\Users\Administrator\AppData\Local\temp\NEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\uninst1.exe
C:\Users\will\AppData\Local\temp\avgnt.exe
C:\Users\will\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl0mhhl.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-28 17:35

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-12-2014
Ran by will at 2014-12-28 17:47:24
Running from c:\Users\will\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
7500_7600_7700_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
7-Zip 9.21beta (HKLM\...\7-Zip) (Version:  - )
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
AFPL Ghostscript 8.54 (HKLM\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM\...\AFPL Ghostscript Fonts) (Version:  - )
AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audioro iPod Converter 3 (HKLM\...\Audioro iPod Converter) (Version: 3 - Red Kawa)
Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1500}) (Version: 12.21.0.3945 - APN, LLC)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.4.37268 - Ask.com) <==== ATTENTION
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bid-O-Matic v2.14.12 (HKLM\...\Bid-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
bitcontrol® MPEG Video Decoder v3.0 (HKLM\...\bcMPEG2dec) (Version: 3.0 - BitCtrl Systems GmbH)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v6.00.05(FSC) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BPD_HPSU (Version: 1.00.0000 - Hewlett-Packard) Hidden
BPD_Scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 82.0.173.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Citrix XenApp Plugin for Hosted Apps (HKLM\...\{388C130B-0079-46B4-A0D5-DC2DD7A89A7B}) (Version: 11.0.0.5357 - Citrix Systems, Inc.)
Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden
CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
D45V120 (HKLM\...\{3BB9419A-CC71-4C2F-80D4-B7AC18D43268}_is1) (Version:  - FTS)
Destination Component (Version: 090.000.091.086 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Disk Speedup (HKLM\...\{FC7E771F-8170-4573-825D-EDB6723C804F}_is1) (Version: 3.2.0.16503 - Systweak Software)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.24 - DivX, LLC)
DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Educazione Stradale per la Scuola 2003 (HKLM\...\Educazione Stradale per la Scuola 2003) (Version:  - )
EOS USB WIA Driver (HKLM\...\EOS USB WIA Driver) (Version: 6.0.0.4 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
e-Wörterbücher (HKLM\...\{4737AD9F-13AA-4E4C-B86F-B631D557F6A7}) (Version:  - )
Fax (Version: 120.0.194.000 - Hewlett-Packard) Hidden
FlashLynx Video Download Software (HKLM\...\FlashLynx) (Version:  - NCH Software)
FortiClient Connect SSLVPN v4.0.2143 (HKLM\...\{A34DCE59-0004-0000-2143-3F8A9926B752}) (Version: 4.0.2143 - Fortinet Inc.)
Free M4a to MP3 Converter 7.2 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
getPlus(R) for Adobe (HKLM\...\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}) (Version: 1.5.2.35 - NOS Microsystems Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP)
HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP)
HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP)
HP Officejet Pro All-In-One Series (HKLM\...\{868EA922-5675-4E91-BDA6-BBD0F923C5EF}) (Version: 1.0 - HP)
HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
HP Photosmart.All-In-One Driver Software 8.0 .A (HKLM\...\{282E5AB2-8E47-4571-B6FA-6B512555B557}) (Version: 8.0 - HP)
HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Japanese Fonts Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5760-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.11.02 - JMicron Technology Corp.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L7700 (Version: 50.0.165.000 - Hewlett-Packard) Hidden
Langenscheidt Grammatiktrainer Englisch (HKLM\...\Grammatiktrainer Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 1 Englisch (HKLM\...\Kurs 1 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 2 Englisch (HKLM\...\Kurs 2 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Vokabeltrainer 3.0 Englisch (HKLM\...\{138B4B3C-09D9-4026-AC33-998E8E5B2FEE}) (Version: 3.0.12 - Langenscheidt)
Launch Manager V1.4.9 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.4.9 - Wistron Corp.)
lingDIALOG (HKLM\...\{627C5AC0-772C-4661-B696-42E04AEB1872}) (Version: 2.00.0010 - LingCom GmbH)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden
MI-7200L Wireless Laser Mouse (HKLM\...\{235C3A50-559F-4CAA-BAC3-4CC9ABF51976}) (Version: 1.00.4 Build 050111 - Trust)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2742597) (HKLM\...\M2742597) (Version:  - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Standard 2007 (HKLM\...\STANDARD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc)
MPM (HKLM\...\{8F968232-15C6-4872-84C2-9FCDAA1AEAB6}) (Version: 1.00.0000 - Hewlett-Packard)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM\...\{e2bfefde-f5cb-4367-aa60-5bd209dd6d88}) (Version:  - Nero AG)
Network (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{25CFEF55-A945-41FC-86ED-76469F31DF37}) (Version: 7.1.41.0 - Nokia)
Nokia Home Media Server (HKLM\...\{0EEB3C40-2A8C-4045-B3F9-13C4A5C490C0}) (Version: 1.0.174 - Nokia)
Nokia Music (HKLM\...\{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}) (Version: 1.1.1203 - Nokia Music)
Nokia Ovi Suite (HKLM\...\Nokia Ovi Suite) (Version: 3.1.0.91 - Nokia)
Nokia Ovi Suite (Version: 3.1.0.91 - Nokia) Hidden
Nokia Ovi Suite Software Updater (HKLM\...\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}) (Version: 02.07.004.45780 - Nokia Corporation)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.60.0 - Nokia)
Nokia PC Suite (Version: 7.1.60.0 - Nokia) Hidden
Nokia Photos (HKLM\...\{EB938616-16BB-491E-A5A0-CA4AB4167BB4}) (Version: 1.6.103 - Nokia)
Nokia Software Updater (HKLM\...\{4D568C38-0552-4CDD-A643-01FAFA2957EF}) (Version: 02.06.006.44298 - Nokia Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Ovi Desktop Sync Engine (Version: 1.5.257.0 - Nokia) Hidden
OviMPlatform (Version: 2.7.66.0 - Nokia) Hidden
PC Connectivity Solution (HKLM\...\{3DE96337-68D2-48E0-A863-6E4A5CD3BC25}) (Version: 11.4.16.0 - Nokia)
PHOTOfunSTUDIO HD Edition (HKLM\...\{9A9DBEBC-C800-4776-A970-D76D6AA405B1}) (Version: 3.00.126 - Panasonic)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
PriceSparrow (HKLM\...\{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}) (Version: 1.4.9 - Ciuvo GmbH) <==== ATTENTION
ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RealDownloader (Version: 1.3.1 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 106.10.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rhapsody Player Engine (HKLM\...\{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}) (Version: 1.1.0 - RealNetworks)
Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden
SearchAnonymizer (HKLM\...\SearchAnonymizer) (Version: 1.0.1 (de) - )
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.5.2 - Synaptics Incorporated)
SystemDiagnostics (HKLM\...\{2F04C9DA-94DA-4361-8B34-02CD8187861F}) (Version: 2.02.0004 - Fujitsu Siemens Computers       )
SystemTweaker (HKLM\...\{DBB1F4ED-3212-4F58-A427-9C01DE4A24A5}_is1) (Version: 2.0.7.0 - Uniblue Systems Ltd)
Systweak PhotoStudio 2.1 (HKLM\...\PhotoStudio_4281508C_4DA1_4d4e_81EB_725D55EC30DC_is1) (Version: 2.1.2954.85 - Systweak Inc.)
Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden
TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Unity Web Player (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VideoPad Videobearbeitungs-Software (HKLM\...\VideoPad) (Version:  - NCH Software)
Videora iPod Converter 6 (HKLM\...\Videora iPod Converter) (Version: 6 - Red Kawa)
VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team)
VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Vokabeltrainer-Update 3.0.32 (HKLM\...\{782F20EF-AEB4-4062-9614-750FE8FD2542}) (Version: 3.0.32 - Langenscheidt)
WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Windows Driver Package - Nokia Modem  (06/09/2010 7.01.0.8) (HKLM\...\E5372C32E8562C76C24DBA6525002B1031495F34) (Version: 06/09/2010 7.01.0.8 - Nokia)
Windows Driver Package - Nokia Modem  (10/07/2010 4.6) (HKLM\...\6DA48AFDE796708D5A4C9121A83E7617A63A9A15) (Version: 10/07/2010 4.6 - Nokia)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
YouRiding FREESKI II version 1.005 (HKLM\...\{0C59CB32-93D5-4C2F-816A-2B53806F1086}_is1) (Version: 1.005 - Intellysurf)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{00b7e0ab-817a-44ad-a04b-d1148d524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.2.183.39\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}\InprocServer32 -> C:\Windows\system32\TosBtShell.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{7c6e29bc-8b8b-4c3d-859e-af6cd158be0f}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c0-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c1-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c2-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c3-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c4-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c5-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c8-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c9-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969ca-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969d6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dc67367a-8b15-47bc-b7f8-0ba0435a504a}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dcedfcbf-c7d1-4b81-a20f-7524d306135e}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File

==================== Restore Points  =========================

23-12-2014 03:00:14 Windows Update
23-12-2014 07:05:57 Windows Update
24-12-2014 00:31:43 Windows Update
24-12-2014 17:56:31 Windows Update
25-12-2014 00:14:55 Windows Update
26-12-2014 00:30:45 Windows Update
27-12-2014 01:07:55 Windows Update
28-12-2014 01:09:50 Windows Update
28-12-2014 11:54:53 Removed Java 7 Update 40
28-12-2014 12:01:09 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:02:20 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:03:23 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:14:59 Revo Uninstaller's restore point - YouTube Downloader Toolbar v4.6
28-12-2014 12:15:13 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 16:09:23 Removed Nokia Map Loader.
28-12-2014 17:15:02 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2013-03-05 12:52 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FA159B-8BDE-4806-A35E-39C0DA0DDA43} - System32\Tasks\{070FAD29-CAED-47CC-B722-7C20DFCC20E2} => pcalua.exe -a F:\PSetup.exe -d F:\ -c /continue /uionlyifneeded
Task: {0D218EA4-7810-47D9-A699-CBFD670500C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0E05EC16-618B-4DDC-94AF-0812EF989E0C} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18] (Google)
Task: {0F8F09D8-C071-488E-959C-32BCF9456382} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {10468CBC-6E77-4187-AD34-396448E127A1} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {1202794D-B8E0-4A9F-A26B-AF9403D2A4A4} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {20612687-EF77-48D4-96E4-BC498100A5F0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {274BF84E-88AC-4480-8C3A-7960F0628542} - System32\Tasks\At1 => net <==== ATTENTION
Task: {38CB697F-A221-4ABF-AB35-817E514D27A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {3FD4A11E-93D1-4E5A-8F13-3B15343B5CB1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {5FE1355E-6DF3-4AEF-97C4-9F70AFE2DDE3} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {763F2A46-A5C2-4618-8988-AE8A7BBAAFCC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {7C36CE27-570C-454F-87E3-7F7AE10EECC9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {85E7E746-62C1-49CE-9CC7-24C0B9164C57} - System32\Tasks\{417ECCC3-2266-40FE-AFE0-788684847D58} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.64.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {99FF7749-AFB4-420E-8CDC-9713A96EF1B4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A0271E82-79C3-4313-8203-5EC8608A9627} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A1518B6F-45D4-4188-9D53-0144D1B6DCF5} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {A5281EAC-8134-4018-A9A1-A4D1E51F7ACB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {A60FE53C-609F-4630-9784-44FC25A55297} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {AD884842-611D-4845-8046-72C5CF5BE993} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe
Task: {D1EAD5A0-6B72-44B2-8CB5-79E97A494D5B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {E7D471DD-B58A-4175-9DA9-0C53071F2156} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {FBA63DC2-B05D-42F0-B547-67CB9873DBC3} - System32\Tasks\pricesparrowSWU => Cscript.exe "C:\Program Files\PriceSparrow\Internet Explorer\swu.vbs"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\At1.job => ?
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2009-05-07 13:42 - 2008-02-25 19:23 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2014-12-28 15:52 - 2014-12-28 15:52 - 00896512 _____ () C:\Users\will\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-06 10:37 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2013-03-06 01:21 - 2013-03-06 01:21 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-03-06 10:37 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-12-28 15:52 - 2014-12-28 15:52 - 00040960 _____ () C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2005-07-22 19:30 - 2005-07-22 19:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-28 17:24 - 2014-12-28 17:24 - 00043008 _____ () c:\users\will\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl0mhhl.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2011-02-08 13:51 - 2010-12-15 12:41 - 00477080 _____ () C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2009-02-26 10:46 - 2009-02-26 10:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 08:46 - 2011-06-22 08:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-12-12 18:14 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-12 18:14 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0D786AE3
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: PCToolsSSDMonitorSvc => 2
MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

========================= Accounts: ==========================

Administrator (S-1-5-21-1275960161-2095831957-4263473684-500 - Administrator - Disabled) => C:\Users\Administrator
ASPNET (S-1-5-21-1275960161-2095831957-4263473684-1002 - Limited - Enabled)
Guest (S-1-5-21-1275960161-2095831957-4263473684-501 - Limited - Disabled)
will (S-1-5-21-1275960161-2095831957-4263473684-1000 - Administrator - Enabled) => C:\Users\will

==================== Faulty Device Manager Devices =============

Name: JMicron OHCI Compliant IEEE 1394 Host Controller
Description: JMicron OHCI Compliant IEEE 1394 Host Controller
Class Guid: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
Manufacturer: JMicron Technology Corp.
Service: ohci1394
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/28/2014 05:22:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/28/2014 05:22:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/28/2014 05:19:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/28/2014 05:16:28 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (12/28/2014 05:16:22 PM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.

Error: (12/28/2014 00:15:43 PM) (Source: MsiInstaller) (EventID: 11316) (User: will-PC)
Description: Product: YouTube Downloader Toolbar v4.6 -- Error 1316.The specified account already exists.

Error: (12/28/2014 00:14:58 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {42d64c56-c6f0-4e86-a473-66bfc00feeaa}

Error: (12/28/2014 00:03:41 PM) (Source: MsiInstaller) (EventID: 11316) (User: will-PC)
Description: Product: YouTube Downloader Toolbar v4.6 -- Error 1316.The specified account already exists.

Error: (12/28/2014 00:02:47 PM) (Source: MsiInstaller) (EventID: 11316) (User: will-PC)
Description: Product: YouTube Downloader Toolbar v4.6 -- Error 1316.The specified account already exists.

Error: (12/28/2014 00:01:30 PM) (Source: MsiInstaller) (EventID: 11316) (User: will-PC)
Description: Product: YouTube Downloader Toolbar v4.6 -- Error 1316.The specified account already exists.


System errors:
=============
Error: (12/28/2014 05:33:22 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (12/28/2014 05:24:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (12/28/2014 05:21:30 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (12/28/2014 05:20:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spybot-S&D 2 Updating Service%%1053

Error: (12/28/2014 05:20:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Spybot-S&D 2 Updating Service

Error: (12/28/2014 05:19:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (12/28/2014 05:16:31 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: 0x80070643Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941){343E12E8-8772-4A72-9982-570122E959DB}203

Error: (12/28/2014 03:52:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: AddonsHelper

Error: (12/28/2014 01:23:47 PM) (Source: Dhcp) (EventID: 1002) (User: )
Description: The IP address lease 192.168.1.2 for the Network Card with network address 00225F148849 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

Error: (12/28/2014 09:57:39 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032


Microsoft Office Sessions:
=========================
Error: (10/05/2013 02:37:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 62 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/24/2012 11:36:49 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 517670 seconds with 5340 seconds of active time.  This session ended with a crash.

Error: (04/16/2012 08:28:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 267918 seconds with 420 seconds of active time.  This session ended with a crash.

Error: (03/16/2012 09:59:13 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 45 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 10:01:33 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 09:57:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/17/2011 07:14:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/06/2011 01:46:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/11/2011 03:38:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 3653 seconds with 600 seconds of active time.  This session ended with a crash.

Error: (11/01/2011 05:54:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6565.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10863 seconds with 4200 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-12-28 17:47:10.384
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:09.606
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:08.779
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:08.050
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:06.971
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:06.181
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:05.393
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:47:04.512
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:46:35.290
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-28 17:46:34.465
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 67%
Total physical RAM: 3003.96 MB
Available physical RAM: 967.95 MB
Total Pagefile: 5980.22 MB
Available Pagefile: 3185.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.18 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:230.87 GB) (Free:48.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8E8668DD)
Partition 1: (Not Active) - (Size=2 GB) - (Type=27)
Partition 2: (Active) - (Size=230.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================

wieburanda · 28.12.2014, 17:56

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malware Protection, Starting, 
Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malware Protection, Started, 
Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Update, 28/12/2014 16:36:06, SYSTEM, WILL-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, 
Update, 28/12/2014 16:36:06, SYSTEM, WILL-PC, Manual, Rootkit Database, 2014.11.18.1, 2014.12.23.2, 
Protection, 28/12/2014 16:36:08, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Manual, Malware Database, 2014.11.20.6, 2014.12.28.7, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 28/12/2014 16:36:27, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 28/12/2014 16:36:27, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 28/12/2014 16:36:28, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Protection, 28/12/2014 17:19:02, SYSTEM, WILL-PC, Protection, Malware Protection, Starting, 
Protection, 28/12/2014 17:19:03, SYSTEM, WILL-PC, Protection, Malware Protection, Started, 
Protection, 28/12/2014 17:19:03, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Detection, 28/12/2014 17:20:35, will, WILL-PC, Protection, Malware Protection, File, PUP.Optional.Pedka.A, C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe, Quarantine, [e75088e0156715219407ab9e38cb27d9]
Protection, 28/12/2014 17:23:31, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 

(end)

Bootsektor · 28.12.2014, 22:00

Hallo wieburanda,

das ist leider das Schutzprotokolll von MBAM, ich brauche aber das Suchlaufslog:

(Du kannst die Sprache in MBAM einstelle, indem du auf Settings gehst und dann anstatt English in den Optionen Deutsch auswählst.)

Starte Malwarebytes
Gehe nun oben auf Verlauf
links findest du nun die Auswahl Quarantäne und Anwendungsprotokolle
Gehe auf Anwendungsprotokolle
suche hier das letzte Suchlaufsprotokoll und wähle das aus
nun gehe oben auf Ansicht, das Protokoll öffnet sich
unten links steht exportieren, wähle das aus und klicke auf Textdatei
speichere nun das Log unter mbam.txt ab
öffne das Log mit deinem Texteditor
poste mir den Inhalt

wieburanda · 29.12.2014, 18:55

igendwie kriege ich nur das raus ......was verstehst du unter Texteditor?

Code:

ATTFilter

<?xml version="1.0" encoding="UTF-8" ?>
<logs>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.649066+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="d57c2ddb-0149-4aba-87d3-17c00721fc9b" result="Starting" subtype="Malware Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.727066+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="78303128-ee05-4ba6-a625-69320d942108" result="Started" subtype="Malware Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.773866+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6771e7bf-510d-45f7-a68a-945a5e2b8c60" result="Starting" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:49:04.734666+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="670647d2-53bf-4c14-9100-318aaab2db53" result="Started" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="1" datetime="2014-12-29T07:59:26.345466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.28.10" last_modified_tag="a41e6c7f-2a1f-4c9d-84ce-e2be1b5590db" name="Malware Database" toVersion="2014.12.29.3"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.483466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="7dc6fa35-5fd9-4911-9881-2b32f21d5909" result="Starting" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.495466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="e197d9a4-8334-4cfb-9b80-b76eeebaa640" result="Stopping" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.836466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="30a1a0f7-1ef3-42a9-8564-3243e1712f7d" result="Stopped" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:01.608466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="27176478-3b65-483a-a746-8865c51e6f4e" result="Success" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:01.636466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="426e4cd6-091c-483f-b5f3-cdbcacf0e4ff" result="Starting" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:16.072466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6f8f13aa-fcfb-41ee-8518-dc4c4a7f7454" result="Started" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="1" datetime="2014-12-29T09:03:00.617466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.3" last_modified_tag="ab51fcad-bd1a-48a0-a003-0fc72994ce73" name="Malware Database" toVersion="2014.12.29.4"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.663466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="3908b449-8a97-4cc6-933c-64a9c5d18022" result="Starting" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.722466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="0843028c-3d2a-4e66-b24a-bc57d30ec600" result="Stopping" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.882466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="bdc888ee-c280-4c9f-8d73-c4b761375b8d" result="Stopped" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:31.027466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6fcad5c3-c7ea-4acc-9aba-8af586b74a07" result="Success" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:31.056466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="13cd831c-37a0-431c-b7f8-c35c6163a9fc" result="Starting" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:35.043466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="5c5b1852-374a-4bf4-96a6-cefb6101995e" result="Started" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="1" datetime="2014-12-29T16:02:12.685466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.4" last_modified_tag="6ddf5584-bbec-439e-a67a-d28cf7de205e" name="Malware Database" toVersion="2014.12.29.5"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:12.887466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="edd889a1-2ce9-41fb-8923-409a38b781ee" result="Starting" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:12.904466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="3c418f92-d4a4-4739-968c-8b6b6b8501f3" result="Stopping" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:13.155466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="5d85f8e3-180e-47b9-ad99-e8f8445dbb95" result="Stopped" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:55.109466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="d9c72cef-09f3-4e62-9598-313f03ef8ae0" result="Success" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:55.149466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="73e4a468-feeb-43a0-91ef-f2a14e2ef07e" result="Starting" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:59.266466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="8c9190d1-c3fa-41be-a173-ed69fec3efbd" result="Started" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="1" datetime="2014-12-29T18:03:50.146466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.5" last_modified_tag="6518e5d3-28f2-4bef-93d5-58b05a6b4fe2" name="Malware Database" toVersion="2014.12.29.6"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.172466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="77a1fa57-a93d-4575-803f-091c0531c068" result="Starting" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.209466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="7d4cf9de-8a48-457a-8f05-d5049f7cbee9" result="Stopping" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.473466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="a83a377e-7ae1-4af8-8198-517ec61f9aef" result="Stopped" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:30.263466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="86ddb877-3255-4620-9733-ffc70a0983f6" result="Success" subtype="Refresh"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:30.426466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="69514dc8-b0d2-4d70-a227-73628225af7d" result="Starting" subtype="Malicious Website Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:34.488466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="82ab67fc-51a3-44e0-9f2a-cc41024d7ab8" result="Started" subtype="Malicious Website Protection"></record>
</logs>

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 29/12/2014 07:44:53, SYSTEM, WILL-PC, Protection, Malware Protection, Starting, 
Protection, 29/12/2014 07:44:53, SYSTEM, WILL-PC, Protection, Malware Protection, Started, 
Protection, 29/12/2014 07:44:53, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 29/12/2014 07:49:04, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 29/12/2014 07:59:26, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.28.10, 2014.12.29.3, 
Protection, 29/12/2014 07:59:26, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 29/12/2014 07:59:26, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 29/12/2014 07:59:26, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 29/12/2014 08:00:01, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 29/12/2014 08:00:01, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 29/12/2014 08:00:16, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 29/12/2014 09:03:00, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.29.3, 2014.12.29.4, 
Protection, 29/12/2014 09:03:00, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 29/12/2014 09:03:00, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 29/12/2014 09:03:00, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 29/12/2014 09:03:31, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 29/12/2014 09:03:31, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 29/12/2014 09:03:35, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 29/12/2014 16:02:12, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.29.4, 2014.12.29.5, 
Protection, 29/12/2014 16:02:12, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 29/12/2014 16:02:12, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 29/12/2014 16:02:13, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 29/12/2014 16:02:55, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 29/12/2014 16:02:55, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 29/12/2014 16:02:59, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 

(end)

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malware Protection, Starting, 
Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malware Protection, Started, 
Protection, 28/12/2014 16:36:02, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Update, 28/12/2014 16:36:06, SYSTEM, WILL-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, 
Update, 28/12/2014 16:36:06, SYSTEM, WILL-PC, Manual, Rootkit Database, 2014.11.18.1, 2014.12.23.2, 
Protection, 28/12/2014 16:36:08, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Manual, Malware Database, 2014.11.20.6, 2014.12.28.7, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 28/12/2014 16:36:19, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 28/12/2014 16:36:27, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 28/12/2014 16:36:27, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 28/12/2014 16:36:28, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Protection, 28/12/2014 17:19:02, SYSTEM, WILL-PC, Protection, Malware Protection, Starting, 
Protection, 28/12/2014 17:19:03, SYSTEM, WILL-PC, Protection, Malware Protection, Started, 
Protection, 28/12/2014 17:19:03, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Detection, 28/12/2014 17:20:35, will, WILL-PC, Protection, Malware Protection, File, PUP.Optional.Pedka.A, C:\Users\will\AppData\Local\pgcchelper\pgcchelper.exe, Quarantine, [e75088e0156715219407ab9e38cb27d9]
Protection, 28/12/2014 17:23:31, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 28/12/2014 19:08:34, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.28.7, 2014.12.28.8, 
Protection, 28/12/2014 19:08:36, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 28/12/2014 19:08:36, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 28/12/2014 19:08:38, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 28/12/2014 19:09:15, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 28/12/2014 19:09:15, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 28/12/2014 19:09:20, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 28/12/2014 22:13:09, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.28.8, 2014.12.28.9, 
Protection, 28/12/2014 22:13:10, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 28/12/2014 22:13:10, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 28/12/2014 22:13:12, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 28/12/2014 22:14:11, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 28/12/2014 22:14:11, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 28/12/2014 22:14:19, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 
Update, 28/12/2014 23:09:43, SYSTEM, WILL-PC, Scheduler, Malware Database, 2014.12.28.9, 2014.12.28.10, 
Protection, 28/12/2014 23:09:44, SYSTEM, WILL-PC, Protection, Refresh, Starting, 
Protection, 28/12/2014 23:09:44, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 28/12/2014 23:09:44, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 28/12/2014 23:10:13, SYSTEM, WILL-PC, Protection, Refresh, Success, 
Protection, 28/12/2014 23:10:13, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Starting, 
Protection, 28/12/2014 23:10:14, SYSTEM, WILL-PC, Protection, Malicious Website Protection, Started, 

(end)

Vieleicht noch das?

Code:

ATTFilter

 <?xml version="1.0" encoding="UTF-8" ?> 
- <logs>
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.649066+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="d57c2ddb-0149-4aba-87d3-17c00721fc9b" result="Starting" subtype="Malware Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.727066+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="78303128-ee05-4ba6-a625-69320d942108" result="Started" subtype="Malware Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:44:53.773866+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6771e7bf-510d-45f7-a68a-945a5e2b8c60" result="Starting" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:49:04.734666+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="670647d2-53bf-4c14-9100-318aaab2db53" result="Started" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="1" datetime="2014-12-29T07:59:26.345466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.28.10" last_modified_tag="a41e6c7f-2a1f-4c9d-84ce-e2be1b5590db" name="Malware Database" toVersion="2014.12.29.3" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.483466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="7dc6fa35-5fd9-4911-9881-2b32f21d5909" result="Starting" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.495466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="e197d9a4-8334-4cfb-9b80-b76eeebaa640" result="Stopping" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T07:59:26.836466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="30a1a0f7-1ef3-42a9-8564-3243e1712f7d" result="Stopped" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:01.608466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="27176478-3b65-483a-a746-8865c51e6f4e" result="Success" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:01.636466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="426e4cd6-091c-483f-b5f3-cdbcacf0e4ff" result="Starting" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T08:00:16.072466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6f8f13aa-fcfb-41ee-8518-dc4c4a7f7454" result="Started" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="1" datetime="2014-12-29T09:03:00.617466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.3" last_modified_tag="ab51fcad-bd1a-48a0-a003-0fc72994ce73" name="Malware Database" toVersion="2014.12.29.4" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.663466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="3908b449-8a97-4cc6-933c-64a9c5d18022" result="Starting" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.722466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="0843028c-3d2a-4e66-b24a-bc57d30ec600" result="Stopping" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:00.882466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="bdc888ee-c280-4c9f-8d73-c4b761375b8d" result="Stopped" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:31.027466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="6fcad5c3-c7ea-4acc-9aba-8af586b74a07" result="Success" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:31.056466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="13cd831c-37a0-431c-b7f8-c35c6163a9fc" result="Starting" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T09:03:35.043466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="5c5b1852-374a-4bf4-96a6-cefb6101995e" result="Started" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="1" datetime="2014-12-29T16:02:12.685466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.4" last_modified_tag="6ddf5584-bbec-439e-a67a-d28cf7de205e" name="Malware Database" toVersion="2014.12.29.5" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:12.887466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="edd889a1-2ce9-41fb-8923-409a38b781ee" result="Starting" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:12.904466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="3c418f92-d4a4-4739-968c-8b6b6b8501f3" result="Stopping" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:13.155466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="5d85f8e3-180e-47b9-ad99-e8f8445dbb95" result="Stopped" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:55.109466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="d9c72cef-09f3-4e62-9598-313f03ef8ae0" result="Success" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:55.149466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="73e4a468-feeb-43a0-91ef-f2a14e2ef07e" result="Starting" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T16:02:59.266466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="8c9190d1-c3fa-41be-a173-ed69fec3efbd" result="Started" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="1" datetime="2014-12-29T18:03:50.146466+01:00" source="Scheduler" type="Update" username="SYSTEM" systemname="WILL-PC" fromVersion="2014.12.29.5" last_modified_tag="6518e5d3-28f2-4bef-93d5-58b05a6b4fe2" name="Malware Database" toVersion="2014.12.29.6" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.172466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="77a1fa57-a93d-4575-803f-091c0531c068" result="Starting" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.209466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="7d4cf9de-8a48-457a-8f05-d5049f7cbee9" result="Stopping" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:03:50.473466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="a83a377e-7ae1-4af8-8198-517ec61f9aef" result="Stopped" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:30.263466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="86ddb877-3255-4620-9733-ffc70a0983f6" result="Success" subtype="Refresh" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:30.426466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="69514dc8-b0d2-4d70-a227-73628225af7d" result="Starting" subtype="Malicious Website Protection" /> 
  <record severity="debug" LoggingEventType="2" datetime="2014-12-29T18:04:34.488466+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="WILL-PC" last_modified_tag="82ab67fc-51a3-44e0-9f2a-cc41024d7ab8" result="Started" subtype="Malicious Website Protection" /> 
  </logs>

Bootsektor · 29.12.2014, 21:41

Hallo

Das ist das Notepad. Öffnest du mit Notepad.exe wenn du das in die Ausführenzeile eingibst.
Findest du, wenn du auf dem WindowsStartbutton klickst.

Aber das sind alles Schutzprotokolle, ist da keines wo steht Suchlaufsprotokoll?
Sonst mach nochmal nen Scan und dann die anderen Punkte.

wieburanda · 30.12.2014, 10:39

Recht lieben Dank erstmal fuer deine Geduld und Unterstuezung.
jetzt habe ich sowas.....
er hat einen troyaner erkannt und verschiedene andere sachen....... aber hier im protokoll sagt er er habe keine gefunden?

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30/12/2014
Suchlauf-Zeit: 09:31:03
Logdatei: mban.txt2.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2014.12.29.07
Rootkit Datenbank: v2014.12.29.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x86
Dateisystem: NTFS
Benutzer: will

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 377828
Verstrichene Zeit: 36 Min, 21 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

Bootsektor · 31.12.2014, 16:03

Wenn du in Malwarebytes auf Verlauf drückst und dann auf Anwendungsprotokolle, hast du da mehrere Suchlausprotokolle? Schau da mal rein, die kannst du auch exportieren, findest du in der Malwarebytes Anleitung.

wieburanda · 31.12.2014, 17:46

Hallo Sandra,
leider nicht nur das eine das ich gepostet habe......

Bootsektor · 01.01.2015, 00:09

Mach bitte nochmal ein neues FRST

Schritt 1
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

wieburanda · 01.01.2015, 12:04

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-12-2014
Ran by will (administrator) on WILL-PC on 01-01-2015 11:23:32
Running from C:\Users\will\Downloads
Loaded Profile: will (Available profiles: will & Administrator)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\lpksetup.exe
() C:\Users\will\AppData\Local\temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(MS) C:\Program Files\LSM\aus.exe
(ArcSoft, Inc.) C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe
(B.H.A Corporation) C:\Windows\System32\bgsvcgen.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Systweak Software.) C:\Program Files\Disk Speedup\DSUDefragSrv.exe
(Fortinet Inc.) C:\Windows\System32\FortiSSLVPNdaemon.exe
(MS) C:\Program Files\LSM\lsm.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Fujitsu Siemens Computers) C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(MS) C:\Program Files\LSM\lsm.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1996072 2013-03-01] (Synaptics Incorporated)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2009-10-26] (Motorola Inc.)
HKLM\...\Run: [ITSecMng] => C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [192512 2007-07-26] (Wistron)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-30] (DivX, LLC)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-21] (APN)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-06-17] (Realtek Semiconductor)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Ocs_SM] => C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizer.exe [106496 2014-12-28] (OCS)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-20\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Google Update] => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30521952 2014-11-24] (Skype Technologies S.A.)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {b8e7d562-a735-11de-a513-000df05f8e4b} - .\MigWiz\migsetup.exe
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\MountPoints2: {e56a9566-e159-11de-9981-000df05f8e4b} - SYSTEM\G-923-321232-3232-32211-23\memory.exe
AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL => C:\PROGRA~1\SupTab\SEARCH~1.DLL File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP SimpleSave Monitor.lnk
ShortcutTarget: HP SimpleSave Monitor.lnk -> C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe ()
BootExecute: sasnative32autocheck autochk * ROBoot

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-1275960161-2095831957-4263473684-1000] => proxy1.emirates.net.ae:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.firetab.org/?type=ds3hp
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp
URLSearchHook: HKLM - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
URLSearchHook: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 - (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
SearchScopes: HKLM -> DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org/?type=ds3se&p={searchTerms}
SearchScopes: HKLM -> {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org/?type=ds3se&p={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=421&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> DefaultScope {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org.anonymize-me.de/?anonymto=687474703A2F2F7777772E666972657461622E6F72672F3F747970653D647333736526703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {49C13559-0551-4BC3-9F89-1996EF7FE1ED} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {5E1F4A4E-F59C-4A89-A2E3-2D03A1477675} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E67756167657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26736F7572636569643D69653726726C7A3D314937414442465F656E2D47424145333235&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {6CFEC6DA-2FA2-4959-809B-460F97521EE5} URL = hxxp://search.yahoo.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7961686F6F2E636F6D2F7365617263683F66723D6368722D677265656E747265655F69652665693D7574662D3826747970653D39333738313126703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://www.firetab.org.anonymize-me.de/?anonymto=687474703A2F2F7777772E666972657461622E6F72672F3F747970653D647333736526703D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {97A06503-E32B-48FD-9391-F83B0694720A} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} URL = hxxp://dts.search-results.com.anonymize-me.de/?anonymto=687474703A2F2F6474732E7365617263682D726573756C74732E636F6D2F73723F7372633D6965622661707069643D3130312673797374656D69643D3432312673723D3026713D7B7365617263685465726D737D&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {A81958B7-BB39-498C-A3B3-1E2E31671936} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {AAD4C5B3-637E-4907-8F64-74FCEDCA6498} URL = hxxp://websearch.ask.com.anonymize-me.de/?anonymto=687474703A2F2F7765627365617263682E61736B2E636F6D2F72656469726563743F636C69656E743D69652674623D4156522D34266F3D41504E3130323637267372633D63726D26713D7B7365617263685465726D737D266C6F63616C653D64655F49542661706E5F70746E72733D5E4147592661706E5F647469643D5E5959595959595E59595E49542661706E5F7569643D62623230616637642D613630342D346566322D393435342D6339343864663164656233662661706E5F73617569643D43363343353430382D413432302D344645332D384330432D363637433841394234423441&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636F6E647569742E636F6D2F526573756C74734578742E617370783F713D7B7365617263685465726D737D26536561726368536F757263653D3426637469643D435432343331323435&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {B6802D0A-27DC-4843-8027-92685EC89F3E} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
SearchScopes: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> {F8CD1806-E05C-4928-B093-B813C62FE272} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=bfe622f4-ee36-4686-9fb3-11a5af6dcdeb&pid=chipde&mode=bounce&k=0
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: PriceSparrow -> {3F2DC1E7-A56F-49D8-B0CF-DB2300594497} -> C:\Program Files\PriceSparrow\Internet Explorer\pricesparrow.dll ()
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 38 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA5BE45F-BBEC-4ACC-9728-C8E488EB145B}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @FortinetCacheClean -> C:\Program Files\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
FF Plugin: @FortinetTunnelControl -> C:\Program Files\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.1.18 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.1 -> C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @talk.google.com/O1DPlugin -> C:\Users\will\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=3 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @tools.google.com/Google Update;version=9 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1275960161-2095831957-4263473684-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\will\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-05-07]
FF HKLM\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2011-06-11]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-02-18]
FF HKLM\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-05-21]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-06-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.searchnu.com/421
CHR StartupUrls: Default -> "hxxp://www.searchnu.com/421", "hxxp://www.claro-search.com/?affID=117423&tt=5012_7&babsrc=HP_ss&mntrId=e8cf939000000000000000225f148849", "hxxp://istart.webssearches.com/?type=hp&ts=1403559553&from=amt&uid=HitachiXHTS543225L9A300_090108FB2E00LKDDNZ3AX"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\will\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-10-14]
CHR Extension: (Google Docs) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-06]
CHR Extension: (Google Drive) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-06]
CHR Extension: (YouTube) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-06]
CHR Extension: (Adblock Plus) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-26]
CHR Extension: (Google Search) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-06]
CHR Extension: (JavaScript Popup Blocker) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2014-12-22]
CHR Extension: (RealDownloader) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-21]
CHR Extension: (PriceSparrow) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\kljkanaekoongefljnjbghkgjjocmikm [2014-12-28]
CHR Extension: (Skype Click to Call) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-03-06]
CHR Extension: (Google Wallet) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-06]
CHR Extension: (Gmail) - C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-06]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-03-06]
CHR HKLM\...\Chrome\Extension: [kljkanaekoongefljnjbghkgjjocmikm] - C:\Program Files\PriceSparrow\Chrome\pricesparrow-1.4.9.crx [2013-03-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-02-07]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AddonsHelper; C:\Users\will\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe [896512 2014-12-28] () [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AUS; C:\Program Files\LSM\aus.exe [287744 2014-02-22] (MS) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BackupService; C:\Users\will\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [83512 2010-07-01] (ArcSoft, Inc.)
R2 bgsvcgen; C:\Windows\System32\bgsvcgen.exe [145504 2007-06-15] (B.H.A Corporation)
R2 DSUDiskOptimizer; C:\Program Files\Disk Speedup\DSUDefragSrv.exe [669456 2014-12-16] (Systweak Software.)
R2 FortiSslvpnDaemon; C:\Windows\system32\FortiSSLVPNdaemon.exe [825960 2011-06-14] (Fortinet Inc.)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [630784 2008-03-25] (Hewlett-Packard Co.) [File not signed]
R2 Log S.M.; C:\Program Files\LSM\lsm.exe [428032 2014-02-22] (MS) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 SearchAnonymizer; C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2014-12-28] () [File not signed]
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) [File not signed]
R2 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [303104 2008-04-25] (Fujitsu Siemens Computers) [File not signed]
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118784 2006-11-18] (Wistron Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-21] (Microsoft Corporation)
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [28048 2010-02-05] (CSR, plc)
R1 cdrbsdrv; C:\Windows\system32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation) [File not signed]
R3 HidMouse; C:\Windows\System32\Drivers\HidMouse.sys [25856 2005-03-14] (Hama) [File not signed]
R1 Hotkey; C:\Windows\system32\Drivers\Hotkey.sys [9867 2003-04-28] () [File not signed]
S3 johci; C:\Windows\System32\DRIVERS\johci.sys [23136 2012-07-16] (JMicron Technology Corp.)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [6144 2007-01-09] (Chic)
S3 pppop; C:\Windows\System32\DRIVERS\pppop.sys [36384 2009-07-21] (Fortinet Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26112 2011-04-26] (The OpenVPN Project) [File not signed]
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2010-01-09] (AnchorFree Inc)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-01 11:19 - 2015-01-01 11:20 - 00001172 _____ () C:\Users\will\Desktop\FRST.exe - Shortcut.lnk
2014-12-30 10:32 - 2014-12-30 10:32 - 00001209 _____ () C:\Users\will\Desktop\mban.txt2.txt
2014-12-30 10:17 - 2014-12-30 10:17 - 00001204 _____ () C:\Users\will\Desktop\mbam.txt
2014-12-30 09:08 - 2014-12-30 09:09 - 00000000 ____D () C:\8ce881f0337c61261ca70a95ba
2014-12-30 08:47 - 2014-12-30 08:47 - 00000000 _____ () C:\Users\will\AppData\Local\{3B001EBD-B789-4E18-A713-49292506C392}
2014-12-29 18:03 - 2014-12-29 18:03 - 00002507 _____ () C:\mbam.txt
2014-12-28 16:35 - 2015-01-01 11:12 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 16:35 - 2014-12-28 16:35 - 00000905 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-28 16:35 - 2014-12-28 16:35 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-12-28 16:35 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-28 16:35 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-28 16:35 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-28 16:27 - 2014-12-28 16:27 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\will\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-28 16:13 - 2014-12-28 16:13 - 00000780 _____ () C:\Users\will\Downloads\AdwCleaner_4.106.exe - Shortcut.lnk
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\Users\will\AppData\Roaming\Opera
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\ProgramData\DNSErrorHelper
2014-12-28 15:53 - 2014-12-28 15:53 - 00000000 ____D () C:\Program Files\PriceSparrow
2014-12-28 15:52 - 2014-12-31 22:00 - 00000792 _____ () C:\Windows\Tasks\At1.job
2014-12-28 15:52 - 2014-12-28 15:52 - 00000000 ____D () C:\Users\will\AppData\Roaming\OCS
2014-12-28 13:09 - 2014-12-28 13:09 - 02173952 _____ () C:\Users\will\Downloads\AdwCleaner_4.106.exe
2014-12-28 12:24 - 2014-12-28 13:12 - 00000000 ____D () C:\AdwCleaner
2014-12-28 12:10 - 2014-12-28 12:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\will\Downloads\revosetup95.exe
2014-12-28 12:10 - 2014-12-28 12:10 - 00001063 _____ () C:\Users\will\Desktop\Revo Uninstaller.lnk
2014-12-28 11:53 - 2014-12-28 11:59 - 00001106 _____ () C:\Users\will\Desktop\Live PC Help.lnk
2014-12-27 14:27 - 2014-12-28 17:52 - 00056979 _____ () C:\Users\will\Downloads\Addition.txt
2014-12-27 14:24 - 2015-01-01 11:28 - 00038631 _____ () C:\Users\will\Downloads\FRST.txt
2014-12-27 14:24 - 2015-01-01 11:24 - 00000000 ____D () C:\FRST
2014-12-27 14:23 - 2014-12-27 14:23 - 01114624 _____ (Farbar) C:\Users\will\Downloads\FRST.exe
2014-12-23 12:52 - 2015-01-01 11:04 - 00020570 _____ () C:\Windows\PFRO.log
2014-12-22 21:13 - 2014-12-22 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-22 21:12 - 2014-12-22 21:12 - 05317104 _____ (Piriform Ltd) C:\Users\will\Downloads\ccsetup501.exe
2014-12-13 10:33 - 2014-12-13 10:33 - 00001004 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-12 13:20 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 13:20 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 12:50 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-11 06:47 - 2014-11-14 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-11 06:47 - 2014-11-14 08:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-11 06:47 - 2014-11-14 08:13 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 06004224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-11 06:47 - 2014-11-14 08:12 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 11083264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 02006016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-11 06:47 - 2014-11-14 08:11 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-11 06:47 - 2014-11-14 08:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-11 06:47 - 2014-11-14 08:09 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-12-11 06:47 - 2014-11-14 06:38 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-11 06:47 - 2014-11-14 05:00 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-11 06:47 - 2014-11-14 04:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-11 06:47 - 2014-11-14 04:58 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-11 06:47 - 2014-11-14 04:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-02 23:25 - 2014-12-02 23:25 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-12-02 23:15 - 2014-12-02 23:15 - 00016082 _____ () C:\Windows\system32\results.xml
2014-12-02 23:14 - 2014-06-17 19:27 - 03116440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-12-02 23:14 - 2014-06-17 19:18 - 00844192 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2014-12-02 23:14 - 2014-06-17 16:08 - 01205934 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-12-02 23:14 - 2014-06-17 15:42 - 64228864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-12-02 23:14 - 2014-06-13 16:24 - 02477272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-12-02 23:14 - 2014-06-11 17:08 - 00917208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-12-02 23:14 - 2014-06-11 11:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-12-02 23:14 - 2014-06-09 16:57 - 02588376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-12-02 23:14 - 2014-05-14 15:43 - 02143024 _____ () C:\Windows\system32\SStudio.dll
2014-12-02 23:14 - 2014-04-10 12:19 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-12-02 23:14 - 2014-04-09 16:39 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-12-02 23:14 - 2014-03-06 16:35 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-12-02 23:14 - 2014-03-05 05:11 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-12-02 23:14 - 2014-03-05 05:11 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-12-02 23:14 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-12-02 23:14 - 2013-10-11 11:31 - 00919600 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-12-02 23:13 - 2014-04-17 17:42 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-12-02 23:13 - 2014-04-10 12:20 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-12-02 23:13 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-12-02 23:13 - 2014-04-09 16:37 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-12-02 23:13 - 2014-03-21 14:17 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-12-02 23:13 - 2014-03-19 19:19 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-12-02 23:13 - 2014-01-31 16:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-12-02 23:13 - 2013-08-14 15:36 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-12-02 23:13 - 2013-08-14 15:35 - 00509184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-12-02 23:13 - 2013-04-03 14:12 - 00852016 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-12-02 23:11 - 2014-06-09 13:52 - 01451712 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2014-12-02 23:11 - 2014-06-07 00:00 - 00519368 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2014-12-02 23:11 - 2014-05-22 16:24 - 00087864 _____ () C:\Windows\system32\audioLibVc.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-12-02 23:11 - 2014-04-07 16:03 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-12-02 23:11 - 2014-02-18 17:04 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-12-02 23:11 - 2013-10-11 12:47 - 00092584 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00426944 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00403392 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2014-12-02 23:11 - 2013-10-07 00:14 - 00346048 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2014-12-02 23:11 - 2013-06-17 20:20 - 00188696 _____ () C:\Windows\system32\AcpiServiceVnA.dll
2014-12-02 22:41 - 2013-07-30 15:53 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
2014-12-02 22:36 - 2014-12-02 23:27 - 00000000 ___HD () C:\Program Files\Temp
2014-12-02 22:07 - 2014-07-16 11:05 - 00582872 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-12-02 22:07 - 2014-07-16 11:05 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-12-02 22:06 - 2014-12-02 22:06 - 00000000 ____D () C:\ProgramData\Dell
2014-12-02 14:36 - 2014-12-02 22:00 - 00000000 ____D () C:\Users\will\{d5b9c712-3742-4128-bca8-4ae1dec4d16b}
2014-12-02 12:26 - 2014-12-02 12:26 - 00000000 ____D () C:\Windows\Repair

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-01 11:30 - 2011-01-14 18:11 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job
2015-01-01 11:28 - 2013-03-05 15:09 - 01941941 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 11:12 - 2010-01-30 15:48 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-01 11:10 - 2014-02-13 18:00 - 00000000 ___RD () C:\Users\will\Dropbox
2015-01-01 11:10 - 2014-02-13 17:57 - 00000000 ____D () C:\Users\will\AppData\Roaming\Dropbox
2015-01-01 11:07 - 2010-01-30 15:48 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-01 11:05 - 2013-03-06 10:37 - 00000620 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2015-01-01 11:04 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-01 11:04 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-01 11:04 - 2006-11-02 13:45 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-01 01:25 - 2009-04-27 06:54 - 00004268 _____ () C:\Windows\bthservsdp.dat
2015-01-01 01:25 - 2006-11-02 13:58 - 00032600 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-01 01:22 - 2013-03-06 10:37 - 00000446 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-01-01 00:57 - 2012-11-12 13:13 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-31 17:29 - 2011-01-14 18:11 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job
2014-12-31 13:41 - 2010-11-08 06:31 - 00000000 ____D () C:\Users\will\AppData\Local\CrashDumps
2014-12-31 13:29 - 2011-04-17 09:27 - 00000420 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job
2014-12-30 14:52 - 2006-11-02 11:33 - 00801496 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-30 14:48 - 2009-05-09 12:50 - 00002627 _____ () C:\Users\will\Desktop\Microsoft Office Word 2007.lnk
2014-12-30 11:50 - 2011-05-28 13:32 - 00000868 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-12-30 10:29 - 2014-08-18 14:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\systweak
2014-12-30 10:29 - 2014-08-18 14:01 - 00000000 ____D () C:\ProgramData\Systweak
2014-12-28 18:25 - 2013-08-31 13:30 - 00000000 ____D () C:\Users\will\AppData\Roaming\BOM
2014-12-28 16:10 - 2009-09-17 16:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-12-28 15:55 - 2013-08-31 13:30 - 00000835 _____ () C:\Users\Public\Desktop\Bid-O-Matic.lnk
2014-12-28 15:55 - 2013-08-31 13:30 - 00000000 ____D () C:\Program Files\Bid-O-Matic
2014-12-28 14:53 - 2009-05-03 07:05 - 00000000 ____D () C:\Users\will\AppData\Roaming\Skype
2014-12-28 12:10 - 2013-03-05 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-12-28 11:58 - 2012-07-09 21:38 - 00000000 ____D () C:\Users\will\AppData\Roaming\TuneUpMedia
2014-12-28 11:58 - 2012-06-26 04:26 - 00000000 ____D () C:\Users\will\AppData\Roaming\Mozilla
2014-12-28 11:56 - 2009-05-07 07:51 - 00000000 ____D () C:\Program Files\Java
2014-12-24 23:07 - 2009-05-02 19:01 - 00000000 ____D () C:\Users\will\AppData\Roaming\Apple Computer
2014-12-24 00:30 - 2013-03-06 10:37 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-12-22 21:18 - 2013-10-13 22:57 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-12-22 21:17 - 2014-08-21 20:18 - 00001876 _____ () C:\Users\Public\Desktop\Disk Speedup.lnk
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Speedup
2014-12-22 21:17 - 2014-08-21 20:18 - 00000000 ____D () C:\Program Files\Disk Speedup
2014-12-22 21:13 - 2013-03-05 10:25 - 00000810 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-22 21:13 - 2013-03-05 10:25 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-15 16:44 - 2014-11-11 17:05 - 00000000 ____D () C:\Users\will\Documents\daniel schual
2014-12-13 11:10 - 2011-06-16 08:01 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-13 10:54 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-12-13 10:34 - 2014-08-16 19:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-13 10:33 - 2013-10-13 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-12 18:14 - 2013-03-06 09:57 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-12 13:22 - 2008-04-30 05:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 13:17 - 2013-08-15 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-12 12:53 - 2006-11-02 11:24 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-12-12 12:42 - 2014-02-13 18:00 - 00000922 _____ () C:\Users\will\Desktop\Dropbox.lnk
2014-12-12 12:42 - 2014-02-13 17:58 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-10 14:57 - 2012-11-12 13:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-10 14:57 - 2011-07-10 07:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-02 23:22 - 2009-04-26 21:14 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-12-02 23:15 - 2009-04-26 21:14 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-12-02 23:11 - 2009-04-27 06:56 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-12-02 23:05 - 2014-11-06 19:58 - 00002228 _____ () C:\Windows\system32\ASOROSet.bin
2014-12-02 23:05 - 2014-06-23 22:40 - 00000000 ____D () C:\Users\will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2014-12-02 23:05 - 2011-05-28 10:13 - 00000000 ____D () C:\temp
2014-12-02 23:05 - 2009-04-26 21:17 - 00000000 ____D () C:\Users\will
2014-12-02 22:41 - 2011-05-29 13:37 - 00000000 ____D () C:\Program Files\Intel
2014-12-02 22:08 - 2011-02-05 00:03 - 00000000 ____D () C:\Intel
2014-12-02 22:07 - 2009-04-26 21:14 - 00000000 ____D () C:\Program Files\Realtek

Files to move or delete:
====================
C:\ProgramData\ezsid.dat
C:\Users\will\SslvpnClient.exe
C:\Windows\Tasks\At1.job


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\temp\avgnt.exe
C:\Users\Administrator\AppData\Local\temp\NEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Administrator\AppData\Local\temp\uninst1.exe
C:\Users\will\AppData\Local\temp\avgnt.exe
C:\Users\will\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpbfo0bf.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-01 11:14

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-12-2014
Ran by will at 2015-01-01 11:30:53
Running from C:\Users\will\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
7500_7600_7700_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
7-Zip 9.21beta (HKLM\...\7-Zip) (Version:  - )
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden
AFPL Ghostscript 8.54 (HKLM\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM\...\AFPL Ghostscript Fonts) (Version:  - )
AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audioro iPod Converter 3 (HKLM\...\Audioro iPod Converter) (Version: 3 - Red Kawa)
Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1500}) (Version: 12.21.0.3945 - APN, LLC)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.4.37268 - Ask.com) <==== ATTENTION
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
Bid-O-Matic v2.14.12 (HKLM\...\Bid-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
bitcontrol® MPEG Video Decoder v3.0 (HKLM\...\bcMPEG2dec) (Version: 3.0 - BitCtrl Systems GmbH)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v6.00.05(FSC) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BPD_HPSU (Version: 1.00.0000 - Hewlett-Packard) Hidden
BPD_Scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 82.0.173.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Citrix XenApp Plugin for Hosted Apps (HKLM\...\{388C130B-0079-46B4-A0D5-DC2DD7A89A7B}) (Version: 11.0.0.5357 - Citrix Systems, Inc.)
Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden
CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
D45V120 (HKLM\...\{3BB9419A-CC71-4C2F-80D4-B7AC18D43268}_is1) (Version:  - FTS)
Destination Component (Version: 090.000.091.086 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Disk Speedup (HKLM\...\{FC7E771F-8170-4573-825D-EDB6723C804F}_is1) (Version: 3.2.0.16503 - Systweak Software)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.24 - DivX, LLC)
DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Educazione Stradale per la Scuola 2003 (HKLM\...\Educazione Stradale per la Scuola 2003) (Version:  - )
EOS USB WIA Driver (HKLM\...\EOS USB WIA Driver) (Version: 6.0.0.4 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
e-Wörterbücher (HKLM\...\{4737AD9F-13AA-4E4C-B86F-B631D557F6A7}) (Version:  - )
Fax (Version: 120.0.194.000 - Hewlett-Packard) Hidden
FlashLynx Video Download Software (HKLM\...\FlashLynx) (Version:  - NCH Software)
FortiClient Connect SSLVPN v4.0.2143 (HKLM\...\{A34DCE59-0004-0000-2143-3F8A9926B752}) (Version: 4.0.2143 - Fortinet Inc.)
Free M4a to MP3 Converter 7.2 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
getPlus(R) for Adobe (HKLM\...\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}) (Version: 1.5.2.35 - NOS Microsystems Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP)
HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP)
HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP)
HP Officejet Pro All-In-One Series (HKLM\...\{868EA922-5675-4E91-BDA6-BBD0F923C5EF}) (Version: 1.0 - HP)
HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
HP Photosmart.All-In-One Driver Software 8.0 .A (HKLM\...\{282E5AB2-8E47-4571-B6FA-6B512555B557}) (Version: 8.0 - HP)
HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Japanese Fonts Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5760-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.11.02 - JMicron Technology Corp.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L7700 (Version: 50.0.165.000 - Hewlett-Packard) Hidden
Langenscheidt Grammatiktrainer Englisch (HKLM\...\Grammatiktrainer Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 1 Englisch (HKLM\...\Kurs 1 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Kurs 2 Englisch (HKLM\...\Kurs 2 Englisch) (Version: 01.00.00.00 - Langenscheidt)
Langenscheidt Vokabeltrainer 3.0 Englisch (HKLM\...\{138B4B3C-09D9-4026-AC33-998E8E5B2FEE}) (Version: 3.0.12 - Langenscheidt)
Launch Manager V1.4.9 (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.4.9 - Wistron Corp.)
lingDIALOG (HKLM\...\{627C5AC0-772C-4661-B696-42E04AEB1872}) (Version: 2.00.0010 - LingCom GmbH)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden
MI-7200L Wireless Laser Mouse (HKLM\...\{235C3A50-559F-4CAA-BAC3-4CC9ABF51976}) (Version: 1.00.4 Build 050111 - Trust)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2742597) (HKLM\...\M2742597) (Version:  - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Standard 2007 (HKLM\...\STANDARD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc)
MPM (HKLM\...\{8F968232-15C6-4872-84C2-9FCDAA1AEAB6}) (Version: 1.00.0000 - Hewlett-Packard)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM\...\{e2bfefde-f5cb-4367-aa60-5bd209dd6d88}) (Version:  - Nero AG)
Network (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{25CFEF55-A945-41FC-86ED-76469F31DF37}) (Version: 7.1.41.0 - Nokia)
Nokia Home Media Server (HKLM\...\{0EEB3C40-2A8C-4045-B3F9-13C4A5C490C0}) (Version: 1.0.174 - Nokia)
Nokia Music (HKLM\...\{9333DA9B-4F8C-4580-88A7-F12D7B10DC2A}) (Version: 1.1.1203 - Nokia Music)
Nokia Ovi Suite (HKLM\...\Nokia Ovi Suite) (Version: 3.1.0.91 - Nokia)
Nokia Ovi Suite (Version: 3.1.0.91 - Nokia) Hidden
Nokia Ovi Suite Software Updater (HKLM\...\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}) (Version: 02.07.004.45780 - Nokia Corporation)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.60.0 - Nokia)
Nokia PC Suite (Version: 7.1.60.0 - Nokia) Hidden
Nokia Photos (HKLM\...\{EB938616-16BB-491E-A5A0-CA4AB4167BB4}) (Version: 1.6.103 - Nokia)
Nokia Software Updater (HKLM\...\{4D568C38-0552-4CDD-A643-01FAFA2957EF}) (Version: 02.06.006.44298 - Nokia Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Ovi Desktop Sync Engine (Version: 1.5.257.0 - Nokia) Hidden
OviMPlatform (Version: 2.7.66.0 - Nokia) Hidden
PC Connectivity Solution (HKLM\...\{3DE96337-68D2-48E0-A863-6E4A5CD3BC25}) (Version: 11.4.16.0 - Nokia)
PHOTOfunSTUDIO HD Edition (HKLM\...\{9A9DBEBC-C800-4776-A970-D76D6AA405B1}) (Version: 3.00.126 - Panasonic)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
PriceSparrow (HKLM\...\{3F2DC1E7-A56F-49D8-B0CF-DB2300594497}) (Version: 1.4.9 - Ciuvo GmbH) <==== ATTENTION
ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RealDownloader (Version: 1.3.1 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 106.10.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rhapsody Player Engine (HKLM\...\{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}) (Version: 1.1.0 - RealNetworks)
Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden
SearchAnonymizer (HKLM\...\SearchAnonymizer) (Version: 1.0.1 (de) - )
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.5.2 - Synaptics Incorporated)
SystemDiagnostics (HKLM\...\{2F04C9DA-94DA-4361-8B34-02CD8187861F}) (Version: 2.02.0004 - Fujitsu Siemens Computers       )
SystemTweaker (HKLM\...\{DBB1F4ED-3212-4F58-A427-9C01DE4A24A5}_is1) (Version: 2.0.7.0 - Uniblue Systems Ltd)
Systweak PhotoStudio 2.1 (HKLM\...\PhotoStudio_4281508C_4DA1_4d4e_81EB_725D55EC30DC_is1) (Version: 2.1.2954.85 - Systweak Inc.)
Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden
TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Unity Web Player (HKU\S-1-5-21-1275960161-2095831957-4263473684-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VideoPad Videobearbeitungs-Software (HKLM\...\VideoPad) (Version:  - NCH Software)
Videora iPod Converter 6 (HKLM\...\Videora iPod Converter) (Version: 6 - Red Kawa)
VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team)
VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Vokabeltrainer-Update 3.0.32 (HKLM\...\{782F20EF-AEB4-4062-9614-750FE8FD2542}) (Version: 3.0.32 - Langenscheidt)
WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden
Windows Driver Package - Nokia Modem  (06/09/2010 7.01.0.8) (HKLM\...\E5372C32E8562C76C24DBA6525002B1031495F34) (Version: 06/09/2010 7.01.0.8 - Nokia)
Windows Driver Package - Nokia Modem  (10/07/2010 4.6) (HKLM\...\6DA48AFDE796708D5A4C9121A83E7617A63A9A15) (Version: 10/07/2010 4.6 - Nokia)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
YouRiding FREESKI II version 1.005 (HKLM\...\{0C59CB32-93D5-4C2F-816A-2B53806F1086}_is1) (Version: 1.005 - Intellysurf)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{00b7e0ab-817a-44ad-a04b-d1148d524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.135\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.99\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.2.183.39\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.79\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\will\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.145\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}\InprocServer32 -> C:\Windows\system32\TosBtShell.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{7c6e29bc-8b8b-4c3d-859e-af6cd158be0f}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c0-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c1-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c2-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c3-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c4-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c5-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c8-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969c9-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969ca-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{88d969d6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.149\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dc67367a-8b15-47bc-b7f8-0ba0435a504a}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{dcedfcbf-c7d1-4b81-a20f-7524d306135e}\InprocServer32 -> C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSNCON32.DLL (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.25.11\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\will\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1275960161-2095831957-4263473684-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\will\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File

==================== Restore Points  =========================

23-12-2014 03:00:14 Windows Update
23-12-2014 07:05:57 Windows Update
24-12-2014 00:31:43 Windows Update
24-12-2014 17:56:31 Windows Update
25-12-2014 00:14:55 Windows Update
26-12-2014 00:30:45 Windows Update
27-12-2014 01:07:55 Windows Update
28-12-2014 01:09:50 Windows Update
28-12-2014 11:54:53 Removed Java 7 Update 40
28-12-2014 12:01:09 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:02:20 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:03:23 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 12:14:59 Revo Uninstaller's restore point - YouTube Downloader Toolbar v4.6
28-12-2014 12:15:13 Removed YouTube Downloader Toolbar v4.6.
28-12-2014 16:09:23 Removed Nokia Map Loader.
28-12-2014 17:15:02 Windows Update
28-12-2014 23:58:31 Windows Update
30-12-2014 00:26:44 Windows Update
30-12-2014 08:59:07 Windows Update
30-12-2014 23:31:32 Windows Update
01-01-2015 01:23:16 Windows Update
01-01-2015 11:21:12 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2013-03-05 12:52 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FA159B-8BDE-4806-A35E-39C0DA0DDA43} - System32\Tasks\{070FAD29-CAED-47CC-B722-7C20DFCC20E2} => pcalua.exe -a F:\PSetup.exe -d F:\ -c /continue /uionlyifneeded
Task: {0D218EA4-7810-47D9-A699-CBFD670500C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0E05EC16-618B-4DDC-94AF-0812EF989E0C} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18] (Google)
Task: {0F8F09D8-C071-488E-959C-32BCF9456382} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {1202794D-B8E0-4A9F-A26B-AF9403D2A4A4} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {20612687-EF77-48D4-96E4-BC498100A5F0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {274BF84E-88AC-4480-8C3A-7960F0628542} - System32\Tasks\At1 => net <==== ATTENTION
Task: {38CB697F-A221-4ABF-AB35-817E514D27A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {3FD4A11E-93D1-4E5A-8F13-3B15343B5CB1} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {5FE1355E-6DF3-4AEF-97C4-9F70AFE2DDE3} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {763F2A46-A5C2-4618-8988-AE8A7BBAAFCC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {7C36CE27-570C-454F-87E3-7F7AE10EECC9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {85E7E746-62C1-49CE-9CC7-24C0B9164C57} - System32\Tasks\{417ECCC3-2266-40FE-AFE0-788684847D58} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.64.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1603
Task: {A0271E82-79C3-4313-8203-5EC8608A9627} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A1518B6F-45D4-4188-9D53-0144D1B6DCF5} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {A4F76989-F021-44FA-A89E-58FC766890BE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {A5281EAC-8134-4018-A9A1-A4D1E51F7ACB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {AD884842-611D-4845-8046-72C5CF5BE993} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe
Task: {B35407AF-1F55-4B73-A7CA-5740D3A0BE89} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1275960161-2095831957-4263473684-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {D1EAD5A0-6B72-44B2-8CB5-79E97A494D5B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-27] (Google Inc.)
Task: {E7D471DD-B58A-4175-9DA9-0C53071F2156} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {EE774A9E-FAEE-4194-AF22-119902CEE35A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {FBA63DC2-B05D-42F0-B547-67CB9873DBC3} - System32\Tasks\pricesparrowSWU => Cscript.exe "C:\Program Files\PriceSparrow\Internet Explorer\swu.vbs"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\At1.job => ?
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000Core.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275960161-2095831957-4263473684-1000UA.job => C:\Users\will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{D03CD518-E63A-4312-87B2-B0CBAEA5EFC1}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2009-05-07 13:42 - 2008-02-25 19:23 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2014-12-28 15:52 - 2014-12-28 15:52 - 00896512 _____ () C:\Users\will\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\3356edf7a88e475d88eac25e50bcafe7\AddonsHelper.exe
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-03-06 01:21 - 2013-03-06 01:21 - 00039056 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2013-03-06 10:37 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2013-03-06 10:37 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-03-06 10:37 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2013-03-06 10:37 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2014-12-28 15:52 - 2014-12-28 15:52 - 00040960 _____ () C:\Users\will\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
2013-03-06 10:37 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2005-07-22 19:30 - 2005-07-22 19:30 - 00065536 _____ () C:\Windows\system32\TosCommAPI.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-01-01 11:09 - 2015-01-01 11:09 - 00043008 _____ () c:\users\will\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpbfo0bf.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\will\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2011-02-08 13:51 - 2010-12-15 12:41 - 00477080 _____ () C:\Users\will\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2009-02-26 10:46 - 2009-02-26 10:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 08:46 - 2011-06-22 08:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 17:07 - 2013-07-10 17:07 - 00756888 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-12-12 18:14 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-12 18:14 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0D786AE3
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: PCToolsSSDMonitorSvc => 2
MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

========================= Accounts: ==========================

Administrator (S-1-5-21-1275960161-2095831957-4263473684-500 - Administrator - Disabled) => C:\Users\Administrator
ASPNET (S-1-5-21-1275960161-2095831957-4263473684-1002 - Limited - Enabled)
Guest (S-1-5-21-1275960161-2095831957-4263473684-501 - Limited - Disabled)
will (S-1-5-21-1275960161-2095831957-4263473684-1000 - Administrator - Enabled) => C:\Users\will

==================== Faulty Device Manager Devices =============

Name: JMicron OHCI Compliant IEEE 1394 Host Controller
Description: JMicron OHCI Compliant IEEE 1394 Host Controller
Class Guid: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
Manufacturer: JMicron Technology Corp.
Service: ohci1394
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/01/2015 11:28:08 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (01/01/2015 11:27:13 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.

Error: (01/01/2015 11:11:44 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/01/2015 11:05:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/01/2015 01:25:01 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.

Error: (01/01/2015 01:24:52 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1.  The Windows installer cannot continue.

Error: (12/31/2014 01:40:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application VideoConverterApp.exe, version 6.0.0.0, time stamp 0x4c812423, faulting module MOZCRT19.dll, version 8.0.0.0, time stamp 0x4aa02a41, exception code 0xc0000005, fault offset 0x00009cd8,
process id 0x17dc, application start time 0xVideoConverterApp.exe0.

Error: (12/31/2014 01:30:33 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/31/2014 01:18:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/30/2014 11:33:34 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 1.1 - Update '{C0F0DCDC-99EA-4405-BDAE-CACABD3D2DF0}' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\NDP1.1sp1-KB2833941-X86\NDP1.1sp1-KB2833941-X86-msi.0.log.


System errors:
=============
Error: (01/01/2015 11:30:03 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x80070032

Error: (01/01/2015 11:29:51 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: 0x80070643Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941){343E12E8-8772-4A72-9982-570122E959DB}203

Error: (01/01/2015 11:12:49 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (01/01/2015 11:08:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Avira Web Protection%%1053

Error: (01/01/2015 11:08:56 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Avira Web Protection

Error: (01/01/2015 11:06:57 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (01/01/2015 11:05:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (01/01/2015 01:25:03 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: 0x80070643Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941){343E12E8-8772-4A72-9982-570122E959DB}203

Error: (12/31/2014 01:28:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (12/31/2014 01:28:25 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search


Microsoft Office Sessions:
=========================
Error: (10/05/2013 02:37:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 62 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/24/2012 11:36:49 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 517670 seconds with 5340 seconds of active time.  This session ended with a crash.

Error: (04/16/2012 08:28:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 267918 seconds with 420 seconds of active time.  This session ended with a crash.

Error: (03/16/2012 09:59:13 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 45 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 10:01:33 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/19/2011 09:57:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/17/2011 07:14:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/06/2011 01:46:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/11/2011 03:38:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 3653 seconds with 600 seconds of active time.  This session ended with a crash.

Error: (11/01/2011 05:54:53 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6565.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10863 seconds with 4200 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2015-01-01 11:30:20.049
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:19.148
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:18.149
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:17.283
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:15.852
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:14.965
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:13.839
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:30:12.830
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-01-01 11:11:57.573
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-31 21:06:36.006
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Percentage of memory in use: 77%
Total physical RAM: 3003.96 MB
Available physical RAM: 675.27 MB
Total Pagefile: 5986.22 MB
Available Pagefile: 2867.77 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.18 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:230.87 GB) (Free:44.93 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8E8668DD)
Partition 1: (Not Active) - (Size=2 GB) - (Type=27)
Partition 2: (Active) - (Size=230.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Laptop ist extrem langsam geworden und oeffnet selbstaendig internettabs

Log-Analyse und Auswertung: Laptop ist extrem langsam geworden und oeffnet selbstaendig internettabs