Flash Beat

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Ina (administrator) on NOTEBOOKINA on 10-02-2015 20:10:56
Running from C:\Users\Ina\Downloads
Loaded Profiles: Ina (Available profiles: Ina)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Over the Rainbow Tech) C:\ProgramData\FlashBeat\ColorMedia.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\ProgramData\FlashBeat\FlashBeat.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Users\Ina\AppData\Local\Amazon Music\Amazon Music Helper.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [650648 2012-07-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-07-31] ()
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [BakupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-22] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1791856 2014-10-16] (Simply Super Software)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3674576 2015-01-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2880536 2015-02-09] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\Run: [Google Update] => C:\Users\Ina\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-10-10] (Google Inc.)
HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\Run: [Amazon Music] => C:\Users\Ina\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1888707260-532384018-2467579914-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={64CCB63F-11BB-442C-B733-A6872F38AB7F}&mid=a0ad98389f3e47cd9c67f121dba1fda9-f8dfa4e6e9101920f7983b1eca21c10e57ca4070&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-02-09 20:54:09&v=4.0.6.10&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-1888707260-532384018-2467579914-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1888707260-532384018-2467579914-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={64CCB63F-11BB-442C-B733-A6872F38AB7F}&mid=a0ad98389f3e47cd9c67f121dba1fda9-f8dfa4e6e9101920f7983b1eca21c10e57ca4070&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-02-09 20:54:09&v=4.0.6.10&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1888707260-532384018-2467579914-1001 -> {E3C293BF-294D-4C7F-84B0-7BFF0A0731F8} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.0.6.10\AVG Web TuneUp.dll (AVG)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.0.6.10\AVG Web TuneUp.dll (AVG)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\ColorMedia.dll [318616] (Over the Rainbow Tech)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\ColorMedia.dll [318616] (Over the Rainbow Tech)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\ColorMedia.dll [318616] (Over the Rainbow Tech)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\ColorMedia.dll [318616] (Over the Rainbow Tech)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\ColorMedia.dll [318616] (Over the Rainbow Tech)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Winsock: Catalog9-x64 16 C:\WINDOWS\system32\ColorMedia64.dll [364024] (Over the Rainbow Tech)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default
FF DefaultSearchEngine: AVG Secure Search
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.3.0\\npsitesafety.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-1888707260-532384018-2467579914-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Ina\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1888707260-532384018-2467579914-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Ina\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1888707260-532384018-2467579914-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
FF Extension: AVG Web TuneUp - C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default\Extensions\avg@toolbar [2015-02-09]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Ina\AppData\Roaming\Mozilla\Firefox\Profiles\5ebuxzsg.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR DefaultSuggestURL: Default -> hxxp://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-10]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-10]
CHR Extension: (YouTube) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-10]
CHR Extension: (AVG Secure Search) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-02-09]
CHR Extension: (Google-Suche) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-10]
CHR Extension: (Google Wallet) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-10]
CHR Extension: (Google Mail) - C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-10]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [207488 2012-07-31] (Qualcomm Atheros Commnucations)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3440080 2015-01-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [309232 2015-01-06] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
R2 ColorMedia; C:\ProgramData\FlashBeat\ColorMedia.exe [1546208 2015-02-07] (Over the Rainbow Tech) [File not signed]
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-22] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 FlashBeat; C:\ProgramData\FlashBeat\FlashBeat.exe [518144 2015-02-09] () [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-22] (NTI Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-14] (Dritek System INC.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2138936 2014-03-20] (TuneUp Software)
R2 vToolbarUpdater18.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\ToolbarUpdater.exe [1826328 2015-02-09] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-07-31] (Atheros)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [260888 2014-12-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [124184 2014-10-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [277784 2014-09-24] (AVG Technologies CZ, s.r.o.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-07-31] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-14] (Dritek System Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 20:10 - 2015-02-10 20:11 - 00020538 _____ () C:\Users\Ina\Downloads\FRST.txt
2015-02-10 20:10 - 2015-02-10 20:10 - 02132992 _____ (Farbar) C:\Users\Ina\Downloads\FRST64.exe
2015-02-10 20:10 - 2015-02-10 20:10 - 00000000 ____D () C:\FRST
2015-02-09 20:54 - 2015-02-10 18:16 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2015-02-09 20:54 - 2015-02-09 20:55 - 00000000 ____D () C:\Users\Ina\AppData\Local\AVG Web TuneUp
2015-02-09 20:54 - 2015-02-09 20:54 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2015-02-09 20:53 - 2015-02-09 20:54 - 00000000 ____D () C:\ProgramData\AVG Web TuneUp
2015-02-09 20:53 - 2015-02-09 20:53 - 00000000 ____D () C:\Program Files\AVG Web TuneUp
2015-02-09 20:53 - 2015-02-09 20:53 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
2015-02-09 19:54 - 2015-02-09 19:54 - 00000961 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-09 19:54 - 2015-02-09 19:54 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\AVG2015
2015-02-09 19:54 - 2015-02-09 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-09 19:53 - 2015-02-09 19:54 - 00000000 ____D () C:\ProgramData\AVG2015
2015-02-09 19:53 - 2015-02-09 19:53 - 00000000 ___HD () C:\$AVG
2015-02-09 19:53 - 2015-02-09 19:53 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-02-09 19:46 - 2015-02-10 18:17 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-09 19:46 - 2015-02-09 19:58 - 00000000 ____D () C:\Users\Ina\AppData\Local\Avg2015
2015-02-09 19:46 - 2015-02-09 19:46 - 00000000 ____D () C:\Users\Ina\AppData\Local\MFAData
2015-02-09 19:43 - 2015-02-09 19:45 - 159747880 _____ (AVG Technologies) C:\Users\Ina\Downloads\avg_free_x86_all_2015_5645a8758.exe
2015-02-09 19:23 - 2015-02-09 19:23 - 00000000 ____D () C:\ProgramData\Licenses
2015-02-09 19:22 - 2015-02-09 19:22 - 00001115 _____ () C:\Users\Public\Desktop\Trojan Remover.lnk
2015-02-09 19:22 - 2015-02-09 19:22 - 00000000 ____D () C:\Users\Ina\Documents\Simply Super Software
2015-02-09 19:22 - 2015-02-09 19:22 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\Simply Super Software
2015-02-09 19:22 - 2015-02-09 19:22 - 00000000 ____D () C:\ProgramData\Simply Super Software
2015-02-09 19:22 - 2015-02-09 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover
2015-02-09 19:22 - 2015-02-09 19:22 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover
2015-02-09 19:21 - 2015-02-09 19:21 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\Cliqz
2015-02-09 19:21 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\WINDOWS\SysWOW64\dhRichClient3.dll
2015-02-09 19:21 - 2011-03-25 19:42 - 00338432 _____ () C:\WINDOWS\SysWOW64\sqlite36_engine.dll
2015-02-09 19:20 - 2015-02-09 19:20 - 01198368 _____ () C:\Users\Ina\Downloads\Trojan Remover - CHIP-Installer.exe
2015-02-09 19:18 - 2015-02-09 19:18 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Ina\Downloads\sh-remover.exe
2015-02-09 19:14 - 2015-02-09 19:14 - 00003072 _____ () C:\WINDOWS\System32\Tasks\{C506CB7B-EBDE-4E0C-8242-EA4CD57A7350}
2015-02-09 19:09 - 2015-02-09 19:10 - 00002488 _____ () C:\WINDOWS\logboot_09.02.2015.tureg.log
2015-02-09 18:38 - 2001-11-06 01:51 - 00376832 ____N (Edgies) C:\WINDOWS\Pool of Radiance remove.exe
2015-02-09 18:38 - 1999-09-08 15:56 - 00195856 ____R (Microsoft Corporation) C:\WINDOWS\dsetup32.dll
2015-02-09 18:38 - 1999-09-08 15:51 - 00040208 ____R (Microsoft Corporation) C:\WINDOWS\dsetup.dll
2015-02-09 17:48 - 2015-02-09 17:48 - 00000000 ____D () C:\Users\Ina\Downloads\Grandia II
2015-02-09 17:44 - 2015-02-09 17:44 - 00002211 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2015-02-09 17:44 - 2015-02-09 17:44 - 00002205 _____ () C:\Users\Public\Desktop\WinZip.lnk
2015-02-09 17:44 - 2015-02-09 17:44 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\dlg
2015-02-09 17:44 - 2015-02-09 17:44 - 00000000 ____D () C:\Users\Ina\AppData\Local\WinZip
2015-02-09 17:44 - 2015-02-09 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-02-09 17:43 - 2015-02-09 17:44 - 00000000 ____D () C:\ProgramData\WinZip
2015-02-09 17:43 - 2015-02-09 17:44 - 00000000 ____D () C:\Program Files\WinZip
2015-02-09 17:42 - 2015-02-10 20:01 - 00000000 ____D () C:\ProgramData\ca7f1237741e43bb9b5f364c67c93027
2015-02-09 17:42 - 2015-02-09 19:10 - 00005352 _____ () C:\WINDOWS\SysWOW64\ColorMedia.ini
2015-02-09 17:42 - 2015-02-09 19:10 - 00002952 _____ () C:\WINDOWS\SysWOW64\ColorMediaOff.ini
2015-02-09 17:42 - 2015-02-09 19:10 - 00002952 _____ () C:\WINDOWS\system32\ColorMediaOff.ini
2015-02-09 17:42 - 2015-02-09 17:42 - 00003556 _____ () C:\WINDOWS\System32\Tasks\EWVKDXOWUE
2015-02-09 17:42 - 2015-02-09 17:42 - 00000000 ____D () C:\ProgramData\FlashBeat
2015-02-09 17:42 - 2015-02-09 17:42 - 00000000 ____D () C:\ProgramData\16a379cb768f4632acbd7bc4c211ef27
2015-02-09 17:42 - 2015-02-07 21:45 - 00364024 _____ (Over the Rainbow Tech) C:\WINDOWS\system32\ColorMedia64.dll
2015-02-09 17:42 - 2015-02-07 21:45 - 00318616 _____ (Over the Rainbow Tech) C:\WINDOWS\SysWOW64\ColorMedia.dll
2015-02-09 17:31 - 2015-02-09 17:31 - 01376768 _____ () C:\Users\Ina\Downloads\7z920-x64.msi
2015-02-09 14:20 - 2015-02-09 16:17 - 1391405070 _____ () C:\Users\Ina\Downloads\Pool Of Radiance.7z
2015-02-09 13:31 - 2015-02-09 15:04 - 1428665047 _____ () C:\Users\Ina\Downloads\Grandia_2_PC.zip
2015-02-03 15:33 - 2015-02-03 15:33 - 02194432 _____ () C:\Users\Ina\Downloads\AdwCleaner09.exe
2015-02-02 22:38 - 2015-02-02 22:38 - 02194432 _____ () C:\Users\Ina\Downloads\adwcleaner_4.109 (2).exe
2015-02-02 22:32 - 2015-02-02 22:32 - 02194432 _____ () C:\Users\Ina\Downloads\adwcleaner_4.109 (1).exe
2015-02-02 21:43 - 2015-02-02 21:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-02 21:41 - 2015-02-02 21:42 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Ina\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-02 21:36 - 2015-02-02 21:49 - 00000000 ____D () C:\Users\Ina\AppData\Local\EgisTec
2015-02-02 21:14 - 2015-02-03 15:38 - 00000000 ____D () C:\AdwCleaner
2015-02-02 21:14 - 2015-02-02 21:14 - 02194432 _____ () C:\Users\Ina\Downloads\adwcleaner_4.109.exe
2015-02-02 20:55 - 2015-02-02 20:55 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\Enigma Software Group
2015-02-02 20:55 - 2015-02-02 20:55 - 00000000 _____ () C:\autoexec.bat
2015-02-02 20:37 - 2014-12-31 12:14 - 00298120 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-02-02 20:28 - 2015-02-02 20:28 - 00000000 ____D () C:\7fee748ba150ef4da851b6a2d662776a
2015-02-02 20:10 - 2015-02-10 18:20 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\ClassicShell
2015-02-02 20:10 - 2015-02-07 16:58 - 00000000 ____D () C:\Users\Ina\Desktop\Games
2015-02-02 20:10 - 2015-02-02 20:10 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-02-02 20:09 - 2015-02-07 16:58 - 00000000 ____D () C:\Users\Ina\Desktop\Programme
2015-02-02 20:09 - 2015-02-02 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-02-02 20:09 - 2015-02-02 20:09 - 00000000 ____D () C:\Program Files\Classic Shell
2015-02-02 20:07 - 2015-02-02 20:07 - 01191200 _____ () C:\Users\Ina\Downloads\Classic Shell - CHIP-Installer.exe
2015-02-02 18:05 - 2015-02-02 18:05 - 00002770 _____ () C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-02-01 16:41 - 2015-02-01 16:45 - 00000000 ____D () C:\Program Files (x86)\Tropico
2015-02-01 16:41 - 2015-02-01 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico
2015-01-31 09:34 - 2014-03-20 14:44 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe
2015-01-31 09:34 - 2014-03-20 14:44 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll
2015-01-31 09:34 - 2014-03-20 14:44 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll
2015-01-31 09:33 - 2015-01-31 09:33 - 00002217 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2015-01-31 09:33 - 2015-01-31 09:33 - 00000000 ____D () C:\Users\Ina\AppData\Local\TuneUp Software
2015-01-31 09:32 - 2015-01-31 09:33 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2015-01-31 09:30 - 2015-02-07 17:00 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-01-31 09:30 - 2015-01-31 09:30 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-01-31 09:29 - 2015-01-31 09:29 - 03533008 _____ (DVDVideoSoft Ltd. ) C:\Users\Ina\Downloads\FreeYouTubeToMP3Converter (1).exe
2015-01-30 13:13 - 2015-02-09 20:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-28 22:17 - 2015-01-28 22:18 - 39565896 _____ (Amazon) C:\Users\Ina\Downloads\AmazonMusicInstaller(2).exe
2015-01-28 22:17 - 2015-01-28 22:17 - 39565896 _____ (Amazon) C:\Users\Ina\Downloads\AmazonMusicInstaller(1).exe
2015-01-28 22:17 - 2015-01-28 22:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-28 22:16 - 2015-01-28 22:17 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-28 22:16 - 2015-01-28 22:17 - 00000000 ____D () C:\Program Files\iTunes
2015-01-28 22:16 - 2015-01-28 22:17 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-28 22:16 - 2015-01-28 22:16 - 00000000 ____D () C:\Program Files\iPod
2015-01-28 22:15 - 2015-01-28 22:15 - 39565896 _____ (Amazon) C:\Users\Ina\Downloads\AmazonMusicInstaller.exe
2015-01-19 21:48 - 2015-01-19 21:48 - 00000000 ____D () C:\Users\Ina\Downloads\AllesiebenWellen
2015-01-16 20:00 - 2015-01-16 20:00 - 00014564 _____ () C:\Users\Ina\Downloads\Warenverteilungsvorschlag mit MH 2015.xlsx
2015-01-15 20:04 - 2015-01-15 20:04 - 00013966 _____ () C:\Users\Ina\Downloads\Warenverteilungsvorschlag 2015.xlsx
2015-01-14 17:12 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 17:12 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 17:12 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 17:12 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 17:12 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 17:12 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 17:12 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 17:12 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 17:12 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 17:12 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 17:12 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 17:12 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 17:12 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 17:12 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 17:12 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 17:12 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 17:12 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 17:12 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 17:12 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 17:12 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 17:12 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 17:12 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 17:12 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 17:12 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 17:12 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2015-01-11 13:01 - 2015-01-11 13:02 - 00015662 _____ () C:\Users\Ina\Downloads\Warenverteilungsvorschlag.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 20:06 - 2014-05-13 19:31 - 01075646 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-10 20:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-10 19:57 - 2013-02-18 16:40 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1888707260-532384018-2467579914-1001
2015-02-10 19:52 - 2014-05-13 20:16 - 00000000 ___DO () C:\Users\Ina\OneDrive
2015-02-10 18:27 - 2013-10-10 22:21 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001UA.job
2015-02-10 18:21 - 2014-01-01 17:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-10 18:16 - 2014-06-28 12:57 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E0729FD7-0841-418B-A94C-F6C4902AC14E}
2015-02-10 18:14 - 2013-07-08 20:31 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-10 18:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-09 20:50 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-09 19:54 - 2013-08-11 20:21 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\TuneUp Software
2015-02-09 19:54 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2015-02-09 19:17 - 2014-03-18 11:03 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-09 19:17 - 2014-03-18 10:25 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-09 19:17 - 2014-03-18 10:25 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-09 19:11 - 2014-05-13 19:06 - 00000000 ____D () C:\Users\Ina
2015-02-09 19:10 - 2013-08-22 15:46 - 00298800 _____ () C:\WINDOWS\setupact.log
2015-02-09 19:10 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-09 19:10 - 2013-08-22 14:25 - 76021760 _____ () C:\WINDOWS\system32\config\SOFTWARE_tureg_old
2015-02-09 19:10 - 2013-08-22 14:25 - 11796480 _____ () C:\WINDOWS\system32\config\SYSTEM_tureg_old
2015-02-09 19:10 - 2013-08-22 14:25 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY_tureg_old
2015-02-09 19:09 - 2013-08-22 14:25 - 01048576 _____ () C:\WINDOWS\system32\config\DEFAULT_tureg_old
2015-02-09 19:09 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-09 19:09 - 2013-08-22 14:25 - 00028672 _____ () C:\WINDOWS\system32\config\SAM_tureg_old
2015-02-09 18:40 - 2013-08-22 16:31 - 05042176 _____ () C:\WINDOWS\system32\config\DRIVERS_tureg_old
2015-02-09 18:39 - 2014-06-11 19:34 - 00000000 ____D () C:\Spiele
2015-02-09 17:27 - 2013-10-10 22:21 - 00001084 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001Core.job
2015-02-09 12:39 - 2012-08-02 12:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-08 11:32 - 2014-03-18 02:50 - 00026644 _____ () C:\WINDOWS\PFRO.log
2015-02-07 17:00 - 2013-08-11 20:21 - 00000000 __SHD () C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2015-02-05 21:23 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-05 21:14 - 2013-07-08 20:31 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-04 17:22 - 2013-10-10 22:21 - 00004082 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001UA
2015-02-04 17:22 - 2013-10-10 22:21 - 00003702 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001Core
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-02 22:28 - 2013-03-06 19:14 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2015-02-02 20:48 - 2012-09-14 05:12 - 00001024 ___RH () C:\Users\Public\Documents\NTIMMV9Acer.dll
2015-02-02 20:48 - 2012-08-02 12:32 - 00000000 ____D () C:\Program Files (x86)\NTI
2015-02-02 20:44 - 2013-02-22 20:35 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\WildTangent
2015-02-02 20:44 - 2012-08-02 12:29 - 00000000 ____D () C:\ProgramData\WildTangent
2015-02-02 20:43 - 2013-08-11 14:32 - 00000000 ____D () C:\Program Files (x86)\Saturn Fotoservice
2015-02-02 20:39 - 2014-05-13 20:09 - 00001466 _____ () C:\Users\Ina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-02 20:39 - 2013-02-24 21:22 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-02 20:37 - 2014-12-14 21:28 - 00000442 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.ics
2015-02-02 20:32 - 2015-01-03 14:20 - 00000000 ____D () C:\Program Files\Unlocker
2015-02-02 20:29 - 2013-06-23 19:05 - 00000000 ____D () C:\Users\Ina\AppData\Local\Cyberlink
2015-02-02 20:29 - 2013-03-06 18:04 - 00000000 ____D () C:\ProgramData\Big Fish Games
2015-02-02 20:29 - 2013-03-06 18:00 - 00000000 ____D () C:\BigFishGamesCache
2015-02-02 20:29 - 2013-02-22 20:29 - 00000000 ____D () C:\Users\Ina\AppData\Local\clear.fi
2015-02-02 20:29 - 2012-08-02 12:35 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-02-02 20:28 - 2012-08-02 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-02-02 20:15 - 2014-12-16 17:38 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\Opera Software
2015-02-02 20:15 - 2014-12-16 17:38 - 00000000 ____D () C:\Users\Ina\AppData\Local\Opera Software
2015-02-02 20:15 - 2014-12-16 17:36 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-02 20:01 - 2013-03-01 19:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-01 16:05 - 2013-03-06 19:17 - 00211406 _____ () C:\WINDOWS\DirectX.log
2015-01-31 10:37 - 2013-08-11 20:21 - 00000000 ____D () C:\ProgramData\TuneUp Software
2015-01-31 09:32 - 2013-06-01 17:22 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\DVDVideoSoft
2015-01-31 09:31 - 2013-08-11 20:19 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-01-31 09:31 - 2013-06-01 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-01-28 22:16 - 2013-12-03 21:26 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-01-28 22:16 - 2013-06-23 19:43 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-28 22:15 - 2013-02-18 16:32 - 00000000 ____D () C:\Users\Ina\AppData\Local\Packages
2015-01-28 22:07 - 2013-06-23 19:42 - 00000000 ____D () C:\ProgramData\Apple
2015-01-19 22:55 - 2014-12-12 17:04 - 00000000 ____D () C:\Users\Ina\AppData\Roaming\vlc
2015-01-19 20:33 - 2015-01-03 01:02 - 00000000 ____D () C:\Users\Ina\Downloads\test
2015-01-16 20:01 - 2014-10-01 06:48 - 00000000 ____D () C:\Users\Ina\AppData\Local\Deployment
2015-01-15 21:38 - 2013-10-22 22:43 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 21:25 - 2013-02-27 21:33 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2012-09-14 04:45 - 2012-09-14 04:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Ina\AppData\Local\Temp\avgnt.exe
C:\Users\Ina\AppData\Local\Temp\SIntf16.dll
C:\Users\Ina\AppData\Local\Temp\SIntf32.dll
C:\Users\Ina\AppData\Local\Temp\SIntfNT.dll
C:\Users\Ina\AppData\Local\Temp\SpOrder.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-09 19:27

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by Ina at 2015-02-10 20:12:30
Running from C:\Users\Ina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{F6100F13-F183-47A2-94A8-9AAC4976E228}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.106 - Alps Electric)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.4 - Atheros Communications Inc.)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5646 - AVG Technologies)
AVG 2015 (Version: 15.0.4284 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5646 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.6.10 - AVG Technologies)
Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.63 - Cliqz.com)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)
FlashBeat (HKLM-x32\...\FlashBeat) (Version: 1.0.0.2562 - )
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Google Chrome (HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Guild 2 King's Edition (HKLM-x32\...\{378BA9B5-DB6C-41DB-BE93-86CD198A8A9E}) (Version: 1.0.0 - JoWood)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3003 - Acer Incorporated)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.01.3200 - Acer)
Patch v2.2 (HKLM-x32\...\{74A84478-70A5-4F7A-966C-FA2771FF91A5}_is1) (Version:  - RUNEFORGE Games Studios)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.204 - Ihr Firmenname)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28123 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Sid Meier's Civilization 4 - Beyond the Sword (HKLM-x32\...\{32E4F0D2-C135-475E-A841-1D59A0D22989}) (Version: 3.19 - Firaxis Games)
Sid Meier's Civilization 4 (HKLM-x32\...\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}) (Version: 1.74 - Firaxis Games)
Sid Meier's Civilization 4 (x32 Version: 1.61 - Firaxis Games) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version:  - Turbine, Inc.)
The Lord of the Rings: War in the North (HKLM-x32\...\Steam App 32800) (Version:  - Snowblind Studios)
Theme Park World (HKLM-x32\...\Theme Park World) (Version:  - )
Trojan Remover 6.9.1 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.1 - Simply Super Software)
Tropico (HKLM-x32\...\{818FB39B-1A57-4F1B-A54D-391C33D6C586}) (Version:  - )
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.275 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.275 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.275 - TuneUp Software) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinZip 19.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E5}) (Version: 19.0.11293 - WinZip Computing, S.L. )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1888707260-532384018-2467579914-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Ina\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1888707260-532384018-2467579914-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Ina\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)

==================== Restore Points  =========================

31-01-2015 11:49:33 Geplanter Prüfpunkt
01-02-2015 16:04:25 Installiert Black & White 2
02-02-2015 20:08:42 Installed Classic Shell
05-02-2015 21:22:50 Windows Update
09-02-2015 12:23:24 Installiert Beach Life

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0560B053-6D24-474A-BA7A-FD5B4F3A9720} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001UA => C:\Users\Ina\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: {173274D8-AAD2-4E89-94FD-21DE69BC2F5B} - System32\Tasks\EWVKDXOWUE => C:\ProgramData\16a379cb768f4632acbd7bc4c211ef27\16a379cb768f4632acbd7bc4c211ef27.exe [2015-02-09] ()
Task: {1F123D2C-6B8B-4603-A1C1-E83C97A6FEDD} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-22] ()
Task: {2CA3F758-D7F8-4851-840D-1B3E84986237} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-22] ()
Task: {3BD50409-C3E8-4685-A59A-17C6AF8E9D6F} - System32\Tasks\{C506CB7B-EBDE-4E0C-8242-EA4CD57A7350} => pcalua.exe -a C:\ProgramData\FlashBeat\uninstall.exe
Task: {42F8FFA8-B3F3-4635-BF97-7E726932E4ED} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-24] ()
Task: {43DEB938-60B1-4D99-B77C-5E2261BB3FFF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {5AC64A9B-E289-427A-9DC0-EA2147C79A34} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001Core => C:\Users\Ina\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: {65D7E1D0-0EA4-4B7C-A663-1E880276C450} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {82D7BCA3-39C1-4FDB-B873-05A43CE81958} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {A72083A4-EC26-4FE0-B9FE-645E5102CD1A} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)
Task: {B01465E7-B60B-40F8-876C-25752D1D3DD3} - \SpyHunter4Startup No Task File <==== ATTENTION
Task: {BF710122-D6DA-453F-B1E8-AA8CA18EDD48} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-03-20] (TuneUp Software)
Task: {C668999F-501F-462D-99C6-28297665EB03} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
Task: {FF0C8621-6477-45F8-B45A-5C91520080A6} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001Core.job => C:\Users\Ina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1888707260-532384018-2467579914-1001UA.job => C:\Users\Ina\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-09 17:42 - 2015-02-09 16:39 - 00518144 _____ () C:\ProgramData\FlashBeat\FlashBeat.exe
2014-03-20 14:44 - 2014-03-20 14:44 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-02-09 20:54 - 2015-02-09 20:53 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\loggingserver.exe
2014-01-29 22:02 - 2014-01-29 22:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-07-31 16:45 - 2012-07-31 16:45 - 00384128 _____ () c:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-07-31 16:40 - 2012-07-31 16:40 - 00020992 _____ () c:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2015-01-28 22:18 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Ina\AppData\Local\Amazon Music\Amazon Music Helper.exe
2015-02-09 20:53 - 2015-02-09 20:53 - 02880536 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
2012-08-22 14:04 - 2012-08-22 14:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-08-22 14:04 - 2012-08-22 14:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-08-22 22:26 - 2012-08-22 22:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-22 22:25 - 2012-08-22 22:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-22 22:26 - 2012-08-22 22:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-22 22:25 - 2012-08-22 22:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-22 22:25 - 2012-08-22 22:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-22 22:25 - 2012-08-22 22:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-22 22:26 - 2012-08-22 22:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2012-09-14 04:43 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-02-09 20:54 - 2015-02-09 20:53 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\log4cplusU.dll
2015-02-09 20:53 - 2015-02-09 20:53 - 01663512 _____ () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
2015-02-09 20:53 - 2015-02-09 20:53 - 40630296 _____ () C:\Program Files (x86)\AVG Web TuneUp\libcef.dll
2015-01-30 13:13 - 2015-01-30 13:13 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:6E3C585B
AlternateDataStreams: C:\ProgramData\Temp:D61EB62D
AlternateDataStreams: C:\ProgramData\Temp:FEE00EB9
AlternateDataStreams: C:\Users\Ina\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ColorMedia => ""="service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1888707260-532384018-2467579914-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run32: => "ApnTBMon"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKU\S-1-5-21-1888707260-532384018-2467579914-1001\...\StartupApproved\Run: => "Google Update"

==================== Accounts: =============================

Administrator (S-1-5-21-1888707260-532384018-2467579914-500 - Administrator - Disabled)
Gast (S-1-5-21-1888707260-532384018-2467579914-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1888707260-532384018-2467579914-1003 - Limited - Enabled)
Ina (S-1-5-21-1888707260-532384018-2467579914-1001 - Administrator - Enabled) => C:\Users\Ina

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 76453000

Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 76453000

Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/09/2015 08:30:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.17031 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 394

Startzeit: 01d0449e34d24579

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\syswow64\wwahost.exe

Berichts-ID: 291f8000-b092-11e4-bfe9-20689d45145a

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (02/09/2015 08:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1c6c

Startzeit: 01d0449c1cce865a

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: b73a1c61-b08f-11e4-bfe9-20689d45145a

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12984

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12984

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/09/2015 06:01:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NOTEBOOKINA)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/09/2015 06:01:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NOTEBOOKINA)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (02/09/2015 08:58:19 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: {49F171DD-B51A-40D3-9A6C-52D674CC729D}

Error: (02/09/2015 07:11:12 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (02/09/2015 07:11:12 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (02/09/2015 07:10:19 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (02/09/2015 06:01:39 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

Error: (02/09/2015 06:01:39 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

Error: (02/09/2015 06:01:39 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: App.AppX54xz6wnkhmw763c2y8tb018n7d71dtx7.wwa

Error: (02/09/2015 06:01:38 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/09/2015 06:01:38 PM) (Source: DCOM) (EventID: 10010) (User: NOTEBOOKINA)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (02/09/2015 00:42:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 76453000

Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 76453000

Error: (02/10/2015 06:12:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/09/2015 08:30:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.1703139401d0449e34d245794294967295C:\WINDOWS\syswow64\wwahost.exe291f8000-b092-11e4-bfe9-20689d45145aMicrosoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp

Error: (02/09/2015 08:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206891c6c01d0449c1cce865a4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exeb73a1c61-b08f-11e4-bfe9-20689d45145amicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12984

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12984

Error: (02/09/2015 06:02:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/09/2015 06:01:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NOTEBOOKINA)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

Error: (02/09/2015 06:01:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NOTEBOOKINA)
Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927141


CodeIntegrity Errors:
===================================
  Date: 2015-02-08 12:12:56.699
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-03 17:01:44.823
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-02 21:15:57.394
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-02 21:15:57.222
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-02 20:54:20.744
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-02-02 20:54:20.621
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-2328M CPU @ 2.20GHz
Percentage of memory in use: 54%
Total physical RAM: 3912.27 MB
Available physical RAM: 1790.49 MB
Total Pagefile: 4808.27 MB
Available Pagefile: 2499.05 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:445.01 GB) (Free:305.05 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F4108A47)

Partition: GPT Partition Type.

==================== End Of Log ============================