FRST ist beim Fixing leider hängen geblieben und hat nicht mehr reagiert. als ich den Prozess beendet hatte und FRST neu gestartet hab sagte es mir direkt der Fixlog sei fertig.
Ich poste ihn mal:
Code:
Alles auswählen Aufklappen ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 19-01-2015
Ran by David Engel at 2015-01-21 20:44:52 Run:1
Running from C:\Users\David Engel\Desktop
Loaded Profiles: David Engel (Available profiles: David Engel)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Task: {10332AD8-1A6D-48A3-8E38-E346CACF7EE3} - \7842eb70 No Task File <==== ATTENTION
Task: {11530222-9822-4EAA-BFB9-5925E06C72A3} - \d88be1c No Task File <==== ATTENTION
Task: {1A01F8A6-86EA-4569-BA32-608D06521C06} - \ceb89d40 No Task File <==== ATTENTION
Task: {22C6D372-FC50-4519-B5C5-A2B56F42B3C2} - \7a3ef47c No Task File <==== ATTENTION
Task: {2F4D318B-F369-4C98-B304-F5A8E18C93A2} - \ace63bf0 No Task File <==== ATTENTION
Task: {323FDAEF-12A7-4C6E-B6B8-1EFEA42F5001} - \b0e63a68 No Task File <==== ATTENTION
Task: {34C690D4-20C4-4ABC-8BA0-AF2364492543} - \becf0200 No Task File <==== ATTENTION
Task: {42F4DE03-5E7C-445A-9867-C04F63F31EE6} - \ad3af7c8 No Task File <==== ATTENTION
Task: {4913859C-17B0-4960-BE76-779215D91849} - \4c86bc0c No Task File <==== ATTENTION
Task: {4B6023C5-EDD2-4C66-831F-48FFEE52CACE} - \b1538c78 No Task File <==== ATTENTION
Task: {4FACD718-1A45-4290-A96F-0B663F59C4C4} - System32\Tasks\45026eb0 => C:\Users\DAVIDE~1\AppData\Local\Temp\\setup4076733968.exe <==== ATTENTION
Task: {56CDA0D3-78A0-421E-ABB9-418C91501505} - \df070e80 No Task File <==== ATTENTION
Task: {5A46ACF8-4B69-4FE3-8BAE-EE0CC0BCEE56} - \b6f52770 No Task File <==== ATTENTION
Task: {5E6792EE-0A3D-46FB-AE22-EA8F8E5C503D} - \16d25320 No Task File <==== ATTENTION
Task: {71D6D7F1-71D0-43DB-A988-CF9201EA9BC8} - \575739e8 No Task File <==== ATTENTION
Task: {72CD3727-88FB-405C-94BB-23E4FE3FE617} - \ddd72840 No Task File <==== ATTENTION
Task: {7A4DF1FF-FD15-4061-A24A-F4F6148ADED8} - \a2002928 No Task File <==== ATTENTION
Task: {7AA01F0B-5604-4EF7-B09F-63AEB007B3A2} - \54da9420 No Task File <==== ATTENTION
Task: {7ECFCA4D-5ACA-44D4-9333-0D19E24A5AA5} - System32\Tasks\f5f36f24 => C:\Users\DAVIDE~1\AppData\Local\Temp\\setup4059328268.exe <==== ATTENTION
Task: {88BAC989-1324-4B59-9C75-54BE7B9646F6} - \9ea26a9c No Task File <==== ATTENTION
Task: {8A16775E-A772-4A3D-8F7E-45627DF4CB08} - \c039b47c No Task File <==== ATTENTION
Task: {92DA3894-AF54-4C1A-ABC4-E562DE68330D} - \da240da0 No Task File <==== ATTENTION
Task: {A62CF9AE-CEB2-4475-9CDB-4C7A0B76883B} - System32\Tasks\{335CA652-06A0-4C90-B11F-106466CCE734} => pcalua.exe -a "C:\Users\David Engel\Desktop\setup.exe" -d "C:\Users\David Engel\Desktop"
Task: {A82B83D3-41D0-46F1-B5EE-DD6B6C1B6931} - \e8bd60 No Task File <==== ATTENTION
Task: {B2FF72F8-2491-489D-9EB0-C60DEAC65581} - \da4afbb0 No Task File <==== ATTENTION
Task: {BE2E2CB0-4E3D-4BE2-833D-BB08C64D8E6B} - System32\Tasks\e8d3af80 => C:\Users\DAVIDE~1\AppData\Local\Temp\\setup3906187136.exe <==== ATTENTION
Task: {BFD675EC-58D8-4F98-993C-9B1D2E1E9FAB} - \6bdc3698 No Task File <==== ATTENTION
Task: {D62FF945-FED7-4B79-98E9-7D1E6254F800} - \889d9f2c No Task File <==== ATTENTION
Task: {D942E5D6-9803-4E79-80BD-6A7E5740D353} - \11015950 No Task File <==== ATTENTION
Task: {DB6F1920-AE35-413F-9EB4-EBC2A3D9C97D} - System32\Tasks\f409e070 => C:\Users\DAVIDE~1\AppData\Local\Temp\\setup3021004544.exe <==== ATTENTION
Task: {E14534E0-FB7A-41FA-86E1-CA8FD695F3E7} - System32\Tasks\ff3efb40 => C:\Users\DAVIDE~1\AppData\Local\Temp\\setup2275163168.exe <==== ATTENTION
Task: {EDDD8E7E-DF80-4F61-BD60-E82B6AFD3738} - \13d83880 No Task File <==== ATTENTION
Task: {EF8B3455-FBD6-4ACF-A646-6BE89587B4F8} - \517999a8 No Task File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about :blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about :blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about :blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about :blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about :blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Extension: Avira Browser Safety - C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\abs@avira.com [2015-01-20]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [pickdmmkcajdddggmoaommkkoafandof] - C:\Users\David Engel\AppData\Local\CRE\pickdmmkcajdddggmoaommkkoafandof.crx [2013-10-10]
CHR HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\David Engel\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-30]
CHR HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\...\Chrome\Extension: [pickdmmkcajdddggmoaommkkoafandof] - C:\Users\David Engel\AppData\Local\CRE\pickdmmkcajdddggmoaommkkoafandof.crx [2013-10-10]
C:\Users\David Engel\AppData\Local\nsr324A.tmp
C:\ProgramData\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}
C:\Users\Default\AppData\Roaming\Compatibility Verifier
C:\ProgramData\Y4Ki2D2g0.dat
C:\Users\David Engel\MTGOinstall.exe
C:\Users\David Engel\AppData\Local\Temp\avgnt.exe
C:\Users\David Engel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyotk9h.dll
C:\Users\David Engel\AppData\Local\Temp\ose00000.exe
C:\Users\David Engel\AppData\Local\Temp\Quarantine.exe
C:\Users\David Engel\AppData\Local\Temp\sqlite3.dll
C:\Users\David Engel\AppData\Local\Temp\_isC6DA.exe
EmptyTemp:
Hosts:
*****************
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10332AD8-1A6D-48A3-8E38-E346CACF7EE3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10332AD8-1A6D-48A3-8E38-E346CACF7EE3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\7842eb70" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{11530222-9822-4EAA-BFB9-5925E06C72A3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11530222-9822-4EAA-BFB9-5925E06C72A3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d88be1c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1A01F8A6-86EA-4569-BA32-608D06521C06}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A01F8A6-86EA-4569-BA32-608D06521C06}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ceb89d40" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{22C6D372-FC50-4519-B5C5-A2B56F42B3C2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22C6D372-FC50-4519-B5C5-A2B56F42B3C2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\7a3ef47c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2F4D318B-F369-4C98-B304-F5A8E18C93A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F4D318B-F369-4C98-B304-F5A8E18C93A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ace63bf0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{323FDAEF-12A7-4C6E-B6B8-1EFEA42F5001}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{323FDAEF-12A7-4C6E-B6B8-1EFEA42F5001}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b0e63a68" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{34C690D4-20C4-4ABC-8BA0-AF2364492543}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34C690D4-20C4-4ABC-8BA0-AF2364492543}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\becf0200" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{42F4DE03-5E7C-445A-9867-C04F63F31EE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42F4DE03-5E7C-445A-9867-C04F63F31EE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ad3af7c8" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4913859C-17B0-4960-BE76-779215D91849}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4913859C-17B0-4960-BE76-779215D91849}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\4c86bc0c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B6023C5-EDD2-4C66-831F-48FFEE52CACE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6023C5-EDD2-4C66-831F-48FFEE52CACE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b1538c78" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4FACD718-1A45-4290-A96F-0B663F59C4C4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4FACD718-1A45-4290-A96F-0B663F59C4C4}" => Key deleted successfully.
C:\Windows\System32\Tasks\45026eb0 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\45026eb0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56CDA0D3-78A0-421E-ABB9-418C91501505}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56CDA0D3-78A0-421E-ABB9-418C91501505}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\df070e80" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A46ACF8-4B69-4FE3-8BAE-EE0CC0BCEE56}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A46ACF8-4B69-4FE3-8BAE-EE0CC0BCEE56}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b6f52770" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5E6792EE-0A3D-46FB-AE22-EA8F8E5C503D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5E6792EE-0A3D-46FB-AE22-EA8F8E5C503D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\16d25320" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{71D6D7F1-71D0-43DB-A988-CF9201EA9BC8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71D6D7F1-71D0-43DB-A988-CF9201EA9BC8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\575739e8" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{72CD3727-88FB-405C-94BB-23E4FE3FE617}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72CD3727-88FB-405C-94BB-23E4FE3FE617}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ddd72840" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7A4DF1FF-FD15-4061-A24A-F4F6148ADED8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A4DF1FF-FD15-4061-A24A-F4F6148ADED8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a2002928" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7AA01F0B-5604-4EF7-B09F-63AEB007B3A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AA01F0B-5604-4EF7-B09F-63AEB007B3A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\54da9420" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7ECFCA4D-5ACA-44D4-9333-0D19E24A5AA5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7ECFCA4D-5ACA-44D4-9333-0D19E24A5AA5}" => Key deleted successfully.
C:\Windows\System32\Tasks\f5f36f24 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\f5f36f24" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88BAC989-1324-4B59-9C75-54BE7B9646F6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88BAC989-1324-4B59-9C75-54BE7B9646F6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\9ea26a9c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8A16775E-A772-4A3D-8F7E-45627DF4CB08}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A16775E-A772-4A3D-8F7E-45627DF4CB08}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c039b47c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{92DA3894-AF54-4C1A-ABC4-E562DE68330D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92DA3894-AF54-4C1A-ABC4-E562DE68330D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\da240da0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A62CF9AE-CEB2-4475-9CDB-4C7A0B76883B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A62CF9AE-CEB2-4475-9CDB-4C7A0B76883B}" => Key deleted successfully.
C:\Windows\System32\Tasks\{335CA652-06A0-4C90-B11F-106466CCE734} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{335CA652-06A0-4C90-B11F-106466CCE734}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A82B83D3-41D0-46F1-B5EE-DD6B6C1B6931}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A82B83D3-41D0-46F1-B5EE-DD6B6C1B6931}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\e8bd60" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B2FF72F8-2491-489D-9EB0-C60DEAC65581}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B2FF72F8-2491-489D-9EB0-C60DEAC65581}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\da4afbb0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE2E2CB0-4E3D-4BE2-833D-BB08C64D8E6B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE2E2CB0-4E3D-4BE2-833D-BB08C64D8E6B}" => Key deleted successfully.
C:\Windows\System32\Tasks\e8d3af80 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\e8d3af80" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BFD675EC-58D8-4F98-993C-9B1D2E1E9FAB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFD675EC-58D8-4F98-993C-9B1D2E1E9FAB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\6bdc3698" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D62FF945-FED7-4B79-98E9-7D1E6254F800}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D62FF945-FED7-4B79-98E9-7D1E6254F800}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\889d9f2c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D942E5D6-9803-4E79-80BD-6A7E5740D353}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D942E5D6-9803-4E79-80BD-6A7E5740D353}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\11015950" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DB6F1920-AE35-413F-9EB4-EBC2A3D9C97D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB6F1920-AE35-413F-9EB4-EBC2A3D9C97D}" => Key deleted successfully.
C:\Windows\System32\Tasks\f409e070 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\f409e070" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E14534E0-FB7A-41FA-86E1-CA8FD695F3E7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E14534E0-FB7A-41FA-86E1-CA8FD695F3E7}" => Key deleted successfully.
C:\Windows\System32\Tasks\ff3efb40 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ff3efb40" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EDDD8E7E-DF80-4F61-BD60-E82B6AFD3738}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDDD8E7E-DF80-4F61-BD60-E82B6AFD3738}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\13d83880" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EF8B3455-FBD6-4ACF-A646-6BE89587B4F8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EF8B3455-FBD6-4ACF-A646-6BE89587B4F8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\517999a8" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
C:\Users\David Engel\AppData\Roaming\Mozilla\Firefox\Profiles\gf77mrzk.default\Extensions\abs@avira.com => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\pickdmmkcajdddggmoaommkkoafandof" => Key deleted successfully.
C:\Users\David Engel\AppData\Local\CRE\pickdmmkcajdddggmoaommkkoafandof.crx => Moved successfully.
"HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\SOFTWARE\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp" => Key deleted successfully.
C:\Users\David Engel\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx => Moved successfully.
"HKU\S-1-5-21-2508884068-3804397540-1067786986-1000\SOFTWARE\Google\Chrome\Extensions\pickdmmkcajdddggmoaommkkoafandof" => Key deleted successfully.
"C:\Users\David Engel\AppData\Local\CRE\pickdmmkcajdddggmoaommkkoafandof.crx" => File/Directory not found.
C:\Users\David Engel\AppData\Local\nsr324A.tmp => Moved successfully.
C:\ProgramData\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4} => Moved successfully.
"C:\Users\Default\AppData\Roaming\Compatibility Verifier" directory move:
Could not move "C:\Users\Default\AppData\Roaming\Compatibility Verifier\cef.pak" => Scheduled to move on reboot.
Could not move "C:\Users\Default\AppData\Roaming\Compatibility Verifier\cef_100_percent.pak" => Scheduled to move on reboot.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\cef_200_percent.pak => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\d3dcompiler_46.dll => Moved successfully.
Could not move "C:\Users\Default\AppData\Roaming\Compatibility Verifier\debug.log" => Scheduled to move on reboot.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\ffmpegsumo.dll => Moved successfully.
Could not move "C:\Users\Default\AppData\Roaming\Compatibility Verifier\icudtl.dat" => Scheduled to move on reboot.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\libEGL.dll => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\libGLESv2.dll => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\NPSWF32_15_0_0_189.dll => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\vcredist_x86.exe => Moved successfully.
Could not move "C:\Users\Default\AppData\Roaming\Compatibility Verifier" directory. => Scheduled to move on reboot.
C:\ProgramData\Y4Ki2D2g0.dat => Moved successfully.
C:\Users\David Engel\MTGOinstall.exe => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\avgnt.exe => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyotk9h.dll => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\David Engel\AppData\Local\Temp\_isC6DA.exe => Moved successfully.
Hosts was reset successfully.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-21 20:56:26)<=
==> ATTENTION: System is not rebooted.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\cef.pak => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\cef_100_percent.pak => Moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\debug.log => Is moved successfully.
C:\Users\Default\AppData\Roaming\Compatibility Verifier\icudtl.dat => Moved successfully.
"C:\Users\Default\AppData\Roaming\Compatibility Verifier" => Directory could not move.
==== End of Fixlog 20:56:29 ====