Windows 7 64 bit: Häufige BSoD und zwei susprekte Funde durch TDSSkiller

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:30 on 11/02/2015 (Holger)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by Holger (administrator) on HOLGER-QUADCORE on 11-02-2015 22:33:38
Running from C:\Users\Holger\Desktop
Loaded Profiles: Holger (Available profiles: Holger & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
() G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\pg_ctl.exe
(UltraVNC) G:\Program Files\UltraVNC\winvnc.exe
(VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(UltraVNC) G:\Program Files\UltraVNC\winvnc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
() G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe
() G:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Windows\SysWOW64\UMonit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Deutsche Post AG) G:\Program Files (x86)\STAMPIT\Binary\STRAY.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieCtrl.exe
(RagTime GmbH) G:\Program Files (x86)\RagTime Privat\Konni\KonniSymbol.exe
(Flexera Software, Inc.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
() G:\Program Files (x86)\applord GmbH\ecoDMS - Client\ecodmssinglesignon.exe
() G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Acronis) G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boincmgr.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinctray.exe
(VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\hqtray.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe
(Elaborate Bytes AG) G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinc.exe
(Apple Inc.) G:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Piriform Ltd) G:\Program Files (x86)\CCleaner\CCleaner64.exe
(BitLeader) G:\Program Files (x86)\lg_fwupdate\fwupdate.exe
() G:\Program Files\Core Temp\Core Temp.exe
() C:\Windows\System32\spool\drivers\x64\3\ssy3cpi.exe
(VideoLAN) G:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hola Networks Ltd.) C:\Users\Holger\AppData\Local\Hola\firefox\app\hola_plugin.exe
(Sun Microsystems, Inc.) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\Tools\jre1.6.0_30\bin\java.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
Failed to access process -> CDAS2PC.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [391296 2010-09-08] (Acronis)
HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [200704 2006-12-29] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10081312 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] => G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5514296 2010-09-08] (Acronis)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [boincmgr] => G:\Program Files (x86)\BOINC\boincmgr.exe [4793088 2009-11-06] (Space Sciences Laboratory)
HKLM-x32\...\Run: [boinctray] => G:\Program Files (x86)\BOINC\boinctray.exe [58112 2009-11-06] (Space Sciences Laboratory)
HKLM-x32\...\Run: [LGODDFU] => G:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-08-11] (Bitleader)
HKLM-x32\...\Run: [VMware hqtray] => G:\Program Files (x86)\VMware\VMware Player\hqtray.exe [64112 2010-11-11] (VMware, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [PowerDVD12DMREngine] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505872 2012-09-19] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe [374560 2012-09-19] (CyberLink Corp.)
HKLM-x32\...\Run: [VirtualCloneDrive] => G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [OmniPage Preload] => G:\Program Files (x86)\Nuance\OmniPage18\OmniPage18.exe [2987880 2011-07-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage 18-reminder] => G:\Program Files (x86)\Nuance\OmniPage18\Ereg\Ereg.exe [333088 2011-05-16] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => G:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2109952 2014-10-07] (Dominik Reichl)
HKLM-x32\...\Run: [iTunesHelper] => G:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [163328 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [STAMPIT-Tray] => G:\Program Files (x86)\STAMPIT\Binary\Stray.exe [83336 2010-06-11] (Deutsche Post AG)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2011-06-20] (Hewlett-Packard Company)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [SandboxieControl] => G:\Program Files\Sandboxie\SbieCtrl.exe [784904 2014-10-14] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Konni Symbol Autostart] => G:\Program Files (x86)\RagTime Privat\Konni\KonniSymbol.exe [53248 2003-02-06] (RagTime GmbH)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Personal ID] => G:\coolspot AG\Personal ID\pid.exe [1134008 2009-03-04] (coolspot AG, Düsseldorf)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [OpAgent] => "OpAgent.exe" /agent
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [324976 2010-05-21] (Flexera Software, Inc.)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ecoprint] => G:\Program Files (x86)\applord GmbH\ecoDMS - Client\runcon.bat [95 2013-12-21] ()
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [CCleaner Monitoring] => G:\Program Files (x86)\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [FileHippo.com] => G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe [2926800 2015-01-27] ()
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\MountPoints2: {b0c0aea2-36ae-11df-b355-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\ubcd\website\index.html
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk
ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.)
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Core Temp (2).lnk
ShortcutTarget: Core Temp (2).lnk -> G:\Program Files\Core Temp\Core Temp.exe ()
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {47F43F50-68E2-4F28-B949-26EE0EC9C505} URL = hxxp://www.buyertools.net/cgi-bin/preispiraten_de/nph.fcgi?qry_str={searchTerms}&category=deutsch&how=and&searchtype=simple&Web=on&wiki_tab=on&wiki_tab_old=+CHECKED&ebay_tab=on&ebay_tab_old=+CHECKED&shoppingcom_tab=on&shoppingcom_tab_old=+CHECKED&pirat_tab=on&pirat_tab_old=+CHECKED&JavaScript=enabled&submit=SUCHEN
SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {65C238F8-3FA6-4AEC-914D-8CD376F70CC6} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> G:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} -  No File
DPF: HKLM-x32 {62415890-4985-0825-2508-23487C2A845F} hxxp://192.168.178.130/en/cab/ipcamera.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{5F13DFFA-CEB5-450C-8AC0-7FB7FA277C11}: [NameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin: synology.com/SurveillancePlugin_x86_64 -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin_x86_64.dll (Synology)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> G:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @qnap.com/MonitorPlayer -> C:\Program Files (x86)\QNAP\VioStorMonitor\npMonHost.dll ( QNAP System, Inc)
FF Plugin-x32: @videolan.org/vlc,version=0.9.9 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: synology.com/SurveillancePlugin -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin.dll (Synology)
FF Plugin HKU\S-1-5-21-2149552335-4145356072-959976354-1000: @hola.org/vlc,version=1.6.584 -> C:\Users\Holger\AppData\Local\Hola\firefox\app\vlc ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\firefox-add-ons.xml
FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\ixquick-https.xml
FF Extension: German Dictionary - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-08]
FF Extension: FoxyProxy Standard - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\foxyproxy@eric.h.jung [2015-02-06]
FF Extension: Hola Better Internet - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2015-02-11]
FF Extension: KeeFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\keefox@chris.tomlinson [2015-01-17]
FF Extension: npIpcam - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\npapi@n.com [2013-07-01]
FF Extension: Flashblock - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-12-12]
FF Extension: Buyertools - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{411F2F11-830F-4AB5-B7F0-FBC77B870B5A} [2012-03-07]
FF Extension: WOT - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-12-03]
FF Extension: Preispiraten4 - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{A86278FF-6B63-446C-B109-DD4E1BAAC868} [2010-01-24]
FF Extension: Biet-O-Matic Firefox Erweiterung - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B0D70E72-2FC1-4b9f-A3D4-5921C854D906} [2010-03-07]
FF Extension: Preispiraten 4 Kontextmenü - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{D2A8BC29-8CA3-4C0A-A206-631C44E9620F} [2009-12-08]
FF Extension: PassIFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\passifox@hanhuy.com.xpi [2014-08-17]
FF Extension: TrashMail.com - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\spam@trashmail.net.xpi [2011-03-27]
FF Extension: Password Exporter - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2014-08-17]
FF Extension: Adblock Plus - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27]
FF Extension: DownThemAll! - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-17]
FF Extension: QuickJava - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2015-02-07]
FF Extension: MyKey Interface - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{FACC66B7-E49F-49ed-997E-66A221FD956D}.xpi [2011-04-01]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{2E6861CA-9A88-4B7B-B935-F810DE84D259} [2015-01-27]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{3F4D6A2C-841D-403C-8CD8-48E54192DDEB} [2015-01-27]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-02]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn [2015-02-10]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-01-24]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-01-24]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [506288 2011-02-08] (REINER SCT)
R2 CLHNServiceForPowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [90640 2012-09-19] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [78352 2012-09-19] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [295440 2012-09-19] (CyberLink)
R2 DirMngr; G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2015-02-07] (SurfRight B.V.)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-06-20] (Hewlett-Packard Company) [File not signed]
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
R2 NS; C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe [282528 2014-12-10] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [508464 2013-07-01] (Samsung Electronics Co., Ltd.)
S3 SandraAgentSrv; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware) [File not signed]
R2 SbieSvc; G:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
R2 StarMoney 9.0 OnlineUpdate; G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 SyncThru Admin 6; G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe [204800 2013-05-03] () [File not signed]
R2 SynoDrService; G:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe [404480 2010-03-24] () [File not signed]
S3 ufad-ws60; G:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [191024 2010-08-19] (VMware, Inc.)
R2 uvnc_service; G:\Program Files\UltraVNC\WinVNC.exe [1793976 2009-12-07] (UltraVNC)
R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [113264 2010-11-11] (VMware, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 SyncThru Admin 6 Database; G:/Program Files (x86)/Samsung Network Printer Utilities/SyncThru Admin 6/UniThruTargetPlatform/PostgreSQL/engine/bin/pg_ctl.exe runservice -N "SyncThru Admin 6 Database" -D "G:/Program Files (x86)/Samsung Network Printer Utilities/SyncThru Admin 6/UniThruTargetPlatform/PostgreSQL/database"  -o "-p 5432" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AVXBAR; C:\Windows\System32\DRIVERS\88xAXbar.sys [20544 2009-11-05] (DTV-DVB Technology, Inc.)
R3 BDATUNE; C:\Windows\System32\DRIVERS\88xBdaTune.sys [60096 2009-11-05] (DTV-DVB Technology, Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\BASHDefs\20150203.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation)
R1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1601000.009\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation)
R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2009-12-18] ()
R3 CX23880; C:\Windows\System32\DRIVERS\88xAStream.sys [200896 2009-11-05] (DTV-DVB Technology, Inc.)
R3 CX88IR; C:\Windows\System32\DRIVERS\88xBdaIr.sys [28224 2009-11-05] (DTV-DVB Technology, Inc.)
R3 CXAVSTS; C:\Windows\System32\DRIVERS\88xBdaCap.sys [35648 2009-11-05] (DTV-DVB Technology, Inc.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-11-25] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-11-25] (Symantec Corporation)
S3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic)
S3 FIXUSTOR; C:\Windows\SysWOW64\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2015-02-07] ()
R0 hotcore3; C:\Windows\SysWow64\drivers\hotcore3.sys [35096 2008-02-14] (Paragon Software Group)
R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\IPSDefs\20150210.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
S3 MEMSWEEP2; C:\Windows\system32\FF9A.tmp [6144 2010-05-26] (Sophos Plc) [File not signed]
R3 NAVENG; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150211.001\ENG64.SYS [129752 2014-11-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150211.001\EX64.SYS [2137304 2014-11-15] (Symantec Corporation)
R2 ntk_PowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-06-20] (Cyberlink Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 RemoteControl-USBLAN; C:\Windows\System32\DRIVERS\rcblan.sys [46616 2007-01-24] (Belcarra Technologies)
S3 RTCore64; G:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-18] ()
S3 SANDRA; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R3 SbieDrv; G:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
R1 SRTSP; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSP64.SYS [914648 2014-12-02] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSPX64.SYS [42200 2014-12-02] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NSx64\1601000.009\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NSx64\1601000.009\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2015-01-24] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSx64\1601000.009\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NSx64\1601000.009\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation)
S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [30720 2005-04-13] (The OpenVPN Project) [File not signed]
S3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2011-08-19] (The OpenVPN Project)
R1 UGURU; C:\Windows\System32\drivers\uGuru.sys [22064 2006-09-20] (ABIT)
U5 UnlockerDriver5; G:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbser64; C:\Windows\System32\DRIVERS\usbser.sys [33280 2013-08-29] (Microsoft Corporation)
R2 vstor2-ws60; G:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2010-08-19] (VMware, Inc.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\NavFilter\000.fcl [147704 2012-09-19] (CyberLink Corp.)
R3 ALSysIO; \??\C:\Users\Holger\AppData\Local\Temp\ALSysIO64.sys [X]
S3 EST_BusEnum; system32\DRIVERS\GenBus.sys [X]
S3 NUS_Bus; system32\DRIVERS\NUS_Bus.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-11 22:33 - 2015-02-11 22:34 - 00035594 _____ () C:\Users\Holger\Desktop\FRST.txt
2015-02-11 22:33 - 2015-02-11 22:33 - 00000000 ____D () C:\FRST
2015-02-11 22:32 - 2015-02-11 22:32 - 02134016 _____ (Farbar) C:\Users\Holger\Desktop\frst64.exe
2015-02-11 22:30 - 2015-02-11 22:30 - 00000474 _____ () C:\Users\Holger\Desktop\defogger_disable.log
2015-02-11 22:30 - 2015-02-11 22:30 - 00000000 _____ () C:\Users\Holger\defogger_reenable
2015-02-11 22:26 - 2015-02-11 22:27 - 00000000 ____D () C:\Users\Holger\Desktop\Virus
2015-02-11 22:23 - 2015-02-11 22:24 - 00380416 _____ () C:\Users\Holger\Desktop\Gmer-19357.exe
2015-02-11 22:22 - 2015-02-11 22:22 - 00050477 _____ () C:\Users\Holger\Desktop\Defogger.exe
2015-02-11 20:34 - 2015-02-11 20:35 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Holger\Desktop\tdsskiller.exe
2015-02-11 20:30 - 2015-02-11 20:33 - 00000335 _____ () C:\local.conf
2015-02-11 20:30 - 2015-02-11 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-02-11 20:29 - 2015-02-11 20:33 - 00000000 ____D () C:\Users\Holger\Desktop\mbar-1.08.3.1004
2015-02-11 20:27 - 2015-02-11 20:27 - 16466552 _____ (Malwarebytes Corp.) C:\Users\Holger\Desktop\mbar-1.08.3.1004.exe
2015-02-10 17:15 - 2015-02-10 17:15 - 00000022 _____ () C:\Windows\S.dirmngr
2015-02-09 17:19 - 2015-02-09 17:19 - 00005398 _____ () C:\Users\Holger\Downloads\LAN24TB_20150209.dss
2015-02-08 19:42 - 2015-02-08 19:42 - 00000000 ____D () C:\Users\Holger\Downloads\qd560w550bger
2015-02-08 19:39 - 2015-02-08 19:40 - 03067440 _____ () C:\Users\Holger\Downloads\qd560w550bger.exe
2015-02-08 01:00 - 2015-02-10 19:33 - 00281068 _____ () C:\Windows\setupact.log
2015-02-08 01:00 - 2015-02-08 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-07 19:34 - 2015-02-07 19:34 - 00000000 ____D () C:\Users\Holger\Downloads\Hola
2015-02-07 15:54 - 2015-02-07 15:54 - 00037970 _____ () C:\Users\Holger\Documents\cc_20150207_155358.reg
2015-02-07 15:54 - 2015-02-07 15:54 - 00024290 _____ () C:\Users\Holger\Documents\cc_20150207_155444.reg
2015-02-07 15:50 - 2015-02-07 15:50 - 05325208 _____ (Piriform Ltd) C:\Users\Holger\Downloads\ccsetup502.exe
2015-02-07 15:48 - 2015-02-07 15:48 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2015-02-07 15:47 - 2015-02-11 21:27 - 00000000 ____D () C:\Windows\CryptoGuard
2015-02-07 15:47 - 2015-02-09 15:32 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2015-02-07 15:47 - 2015-02-07 19:34 - 00548424 _____ (SurfRight) C:\Windows\system32\hmpalert.dll
2015-02-07 15:47 - 2015-02-07 19:34 - 00477008 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll
2015-02-07 15:47 - 2015-02-07 19:34 - 00093144 _____ () C:\Windows\system32\Drivers\hmpalert.sys
2015-02-07 15:47 - 2015-02-07 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2015-02-07 15:46 - 2015-02-07 15:46 - 01889616 _____ (SurfRight B.V.) C:\Users\Holger\Downloads\hmpalert.exe
2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\Desktop\FileHippo App Manager.lnk
2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk
2015-02-07 15:45 - 2015-02-07 15:45 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2015-02-07 15:41 - 2015-02-07 15:41 - 00849352 _____ () C:\Users\Holger\Downloads\AppManagerSetup_1.47.exe
2015-02-07 14:17 - 2015-02-07 14:17 - 00000000 ____D () C:\Windows\en
2015-02-07 14:16 - 2015-02-07 14:16 - 00001313 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-07 14:16 - 2015-02-07 14:16 - 00000000 ____D () C:\Windows\de
2015-02-07 14:15 - 2015-02-07 14:15 - 00001382 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-07 14:11 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-02-07 14:08 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-02-07 14:08 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-02-07 14:08 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-02-07 14:04 - 2015-02-07 14:04 - 00002212 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ___RD () C:\Users\Holger\OneDrive
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-02-07 13:55 - 2015-02-07 13:56 - 01239752 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-web(1).exe
2015-02-07 12:42 - 2015-02-07 12:42 - 00003206 _____ () C:\Windows\System32\Tasks\{00751C2C-0DE5-4235-8359-A01ADA1506E1}
2015-02-07 12:42 - 2015-02-07 12:42 - 00000093 _____ () C:\Windows\SysWOW64\FTCD2XXUN.ini
2015-02-07 12:42 - 2015-02-07 12:42 - 00000065 _____ () C:\Windows\SysWOW64\FTD2XXUN.ini
2015-02-07 12:42 - 2015-02-07 12:40 - 00420864 _____ (FTDI Ltd.) C:\Windows\SysWOW64\FTDIUNIN.exe
2015-02-07 12:39 - 2015-02-07 12:39 - 00000000 ____D () C:\Users\Holger\Downloads\FTClean
2015-02-07 12:36 - 2015-02-07 12:36 - 00452958 _____ () C:\Users\Holger\Downloads\FTClean.zip
2015-02-07 11:49 - 2015-02-07 11:49 - 156896601 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222956-1423258196.mp4
2015-02-07 11:48 - 2015-02-07 11:48 - 58965039 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222421-1423257861.mp4
2015-02-07 11:48 - 2015-02-07 11:48 - 169651682 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-220453-1423256693.mp4
2015-02-07 11:09 - 2015-02-07 11:09 - 00000000 ____D () C:\Program Files (x86)\Synology
2015-02-07 09:50 - 2015-02-07 09:50 - 17465344 _____ () C:\Users\Holger\Downloads\SurveillancePlugin(1).msi
2015-02-06 20:43 - 2015-02-07 13:07 - 00000634 _____ () C:\Users\Holger\Desktop\SANUK Control 3.0.lnk
2015-02-06 20:43 - 2015-02-06 20:43 - 00000634 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\SANUK Control 3.0.lnk
2015-02-06 20:43 - 2015-02-06 20:43 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SANUK CyberControl 3.0
2015-02-06 20:42 - 2015-02-06 20:43 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(2).exe
2015-02-06 19:54 - 2015-02-06 19:55 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(1).exe
2015-02-05 07:07 - 2015-02-05 07:07 - 00004398 _____ () C:\Users\Holger\Desktop\eset.txt
2015-02-04 17:14 - 2015-02-04 17:14 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-04 15:56 - 2015-02-04 15:57 - 00001227 _____ () C:\DelFix.txt
2015-02-04 15:09 - 2015-02-04 15:09 - 00000331 _____ () C:\Users\Holger\Downloads\regfix(1).zip
2015-02-02 18:48 - 2015-02-02 18:48 - 00000000 ____D () C:\Users\Holger\Downloads\regfix
2015-02-02 18:47 - 2015-02-02 18:47 - 00000605 _____ () C:\Users\Holger\Downloads\regfix.zip
2015-02-01 14:17 - 2015-02-01 14:17 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install.exe
2015-01-28 20:14 - 2015-01-28 20:14 - 00000000 ____D () C:\Users\Holger\AppData\Local\Hola
2015-01-28 19:19 - 2015-01-28 19:19 - 00000000 ____D () C:\Windows\system32\IO
2015-01-27 16:09 - 2015-01-28 20:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-25 21:10 - 2015-02-11 20:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-25 21:10 - 2015-02-11 20:30 - 00097496 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-25 21:10 - 2015-01-25 21:10 - 00000793 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-25 21:10 - 2015-01-25 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-25 21:10 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-25 21:10 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-24 15:09 - 2015-01-24 15:09 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security
2015-01-24 15:06 - 2015-01-24 15:06 - 00003214 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2015-01-24 15:05 - 2015-01-24 15:05 - 00102616 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2015-01-24 15:05 - 2015-01-24 15:05 - 00008214 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2015-01-24 15:05 - 2015-01-24 15:05 - 00002457 _____ () C:\Users\Public\Desktop\Norton Security.lnk
2015-01-24 15:03 - 2015-01-24 15:05 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2015-01-24 15:03 - 2015-01-24 15:03 - 00000000 ____D () C:\Program Files (x86)\Norton Security
2015-01-24 14:48 - 2015-01-24 14:49 - 08742712 _____ (Symantec Corporation) C:\Users\Holger\Desktop\NRnR.exe
2015-01-24 14:22 - 2015-01-09 23:27 - 00621200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-24 14:17 - 2015-01-13 05:15 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-24 14:17 - 2015-01-13 05:15 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-24 14:17 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-24 14:17 - 2015-01-10 09:07 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-14 10:20 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 10:20 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 10:20 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 10:20 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 10:20 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 10:20 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 10:20 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 10:20 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 10:20 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 10:20 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 10:20 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 10:20 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 10:20 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-11 22:30 - 2010-03-23 20:08 - 00000000 ____D () C:\Users\Holger
2015-02-11 22:29 - 2013-03-16 17:33 - 00000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini
2015-02-11 22:25 - 2010-03-23 20:26 - 02033073 _____ () C:\Windows\WindowsUpdate.log
2015-02-11 22:00 - 2013-03-13 14:51 - 00642325 _____ () C:\Users\Holger\Network_Meter_Data.js
2015-02-11 21:43 - 2012-04-06 20:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-11 20:27 - 2014-08-17 14:37 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\KeePass
2015-02-11 20:07 - 2010-03-23 21:24 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{424B6B76-676E-4BCF-A3EB-94365BADB9E1}
2015-02-10 19:36 - 2009-07-14 18:58 - 00752936 _____ () C:\Windows\system32\perfh007.dat
2015-02-10 19:36 - 2009-07-14 18:58 - 00171984 _____ () C:\Windows\system32\perfc007.dat
2015-02-10 19:36 - 2009-07-14 06:13 - 01759042 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-10 19:33 - 2010-09-29 12:52 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2015-02-10 19:33 - 2010-07-28 14:02 - 00000000 ____D () C:\ProgramData\Temp
2015-02-10 18:55 - 2013-02-22 17:54 - 00000072 _____ () C:\Users\Public\LMDebug.log
2015-02-10 17:48 - 2011-02-09 19:51 - 00000000 ____D () C:\Users\Holger\AppData\Local\CrashDumps
2015-02-10 17:47 - 2013-02-22 21:37 - 00000000 ____D () C:\Users\Holger\Documents\Scan
2015-02-10 17:23 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 17:23 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 17:22 - 2013-10-15 19:17 - 00009011 _____ () C:\Users\Holger\IP_Log_Data.js
2015-02-10 17:22 - 2010-07-29 15:06 - 00000372 _____ () C:\Windows\lgfwup.ini
2015-02-10 17:16 - 2010-10-21 14:11 - 00000000 ____D () C:\ProgramData\VMware
2015-02-10 17:15 - 2013-10-12 10:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-10 17:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-09 15:56 - 2013-09-03 15:06 - 00000000 ____D () C:\Users\Administrator
2015-02-09 15:41 - 2012-09-25 19:42 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Nitro PDF
2015-02-09 15:32 - 2012-10-19 11:35 - 00350776 ____N () C:\Windows\Minidump\020915-120312-01.dmp
2015-02-09 15:32 - 2010-06-12 16:24 - 00000000 ____D () C:\Windows\Minidump
2015-02-07 17:36 - 2011-02-26 20:56 - 00001824 _____ () C:\Windows\Sandboxie.ini
2015-02-07 15:52 - 2010-09-26 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\FileZilla
2015-02-07 15:51 - 2010-11-20 18:49 - 00000730 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-07 14:16 - 2010-10-27 17:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-02-07 14:14 - 2010-10-27 17:24 - 00001466 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-02-07 14:13 - 2010-10-27 17:24 - 00002494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-02-07 14:12 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-07 14:11 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files\Windows Live
2015-02-07 14:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-02-06 20:31 - 2009-12-07 16:59 - 00000778 _____ () C:\Windows\HBCIKRNL.INI
2015-02-06 19:58 - 2010-10-09 12:23 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\TeamViewer
2015-02-05 00:43 - 2012-04-06 20:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 00:43 - 2012-04-06 20:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 00:43 - 2011-05-17 16:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-29 17:52 - 2010-03-20 14:36 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-28 20:08 - 2012-05-03 18:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-28 13:16 - 2014-11-20 17:32 - 00000000 ____D () C:\Program Files (x86)\Versandhelfer
2015-01-26 15:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-25 21:10 - 2010-09-22 16:36 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Malwarebytes
2015-01-25 21:10 - 2010-09-22 16:36 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-24 15:05 - 2011-02-01 17:13 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2015-01-24 15:03 - 2011-02-01 17:12 - 00000000 ____D () C:\ProgramData\Norton
2015-01-24 14:23 - 2010-07-29 15:06 - 00000000 ____D () C:\Temp
2015-01-24 14:22 - 2013-10-12 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-15 03:19 - 2013-08-16 02:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-15 03:01 - 2010-04-14 15:32 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-13 05:15 - 2013-10-25 15:47 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

==================== Files in the root of some directories =======

2012-11-22 17:29 - 2012-11-22 17:29 - 0000545 _____ () C:\Users\Holger\AppData\Roaming\All CPU MeterV3_Settings.ini
2011-07-14 15:45 - 2012-01-27 18:51 - 0000412 _____ () C:\Users\Holger\AppData\Roaming\All CPU Meter_Settings.ini
2014-11-20 17:31 - 2014-11-20 17:31 - 0000353 _____ () C:\Users\Holger\AppData\Roaming\dpdhl.versandhelfer_state.xml
2012-03-04 17:31 - 2013-03-02 20:42 - 0000841 _____ () C:\Users\Holger\AppData\Roaming\Drives Meter_Settings.ini
2009-06-08 16:32 - 2012-02-04 12:35 - 0099384 _____ () C:\Users\Holger\AppData\Roaming\inst.exe
2011-07-14 15:47 - 2013-11-04 19:51 - 0001389 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Settings.ini
2013-03-16 17:33 - 2015-02-11 22:29 - 0000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini
2009-06-08 16:32 - 2012-02-04 12:35 - 0007859 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.cat
2009-06-08 16:32 - 2012-02-04 12:35 - 0001167 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.inf
2009-06-08 16:33 - 2012-02-04 12:35 - 0000033 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.log
2009-06-08 16:32 - 2012-02-04 12:35 - 0082816 _____ (VSO Software) C:\Users\Holger\AppData\Roaming\pcouffin.sys
2012-10-23 16:01 - 2012-10-27 17:16 - 11718656 _____ () C:\Users\Holger\AppData\Roaming\Sandra.mdb
2013-09-30 15:29 - 2013-10-05 15:10 - 0000676 _____ () C:\Users\Holger\AppData\Roaming\sqlite3Explorer.xml
2011-03-13 14:09 - 2013-12-12 17:22 - 0042744 _____ () C:\Users\Holger\AppData\Roaming\UserTile.png
2010-09-15 16:45 - 2014-07-27 16:49 - 0006144 _____ () C:\Users\Holger\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-09-27 14:58 - 2012-04-21 19:23 - 0000600 _____ () C:\Users\Holger\AppData\Local\PUTTY.RND
2013-10-29 12:39 - 2013-10-29 12:39 - 0001706 _____ () C:\Users\Holger\AppData\Local\recently-used.xbel
2010-04-07 14:59 - 2011-02-06 20:38 - 0007605 _____ () C:\Users\Holger\AppData\Local\resmon.resmoncfg
2012-02-04 11:43 - 2012-11-29 16:31 - 0000040 ___SH () C:\ProgramData\.zreglib
2013-02-15 17:00 - 2013-03-13 14:41 - 0017571 _____ () C:\ProgramData\Network_Meter_Data.csv
2010-08-25 14:35 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xml6380.tmp
2010-11-19 19:25 - 2010-11-19 19:25 - 0013869 _____ () C:\ProgramData\xmlC2E1.tmp
2010-06-19 15:09 - 2010-11-19 19:25 - 0005975 _____ () C:\ProgramData\xmlD137.tmp
2010-06-19 15:09 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xmlD927.tmp
2010-06-19 15:09 - 2010-11-19 19:25 - 0001629 _____ () C:\ProgramData\xmlDA32.tmp

Files to move or delete:
====================
C:\Users\Holger\IP_Log_Data.js
C:\Users\Holger\Network_Meter_Data.js


Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.434.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.463.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.467.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.485.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.520.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.536.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.540.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.555.exe
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.584.exe
C:\Users\Holger\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 00:21

==================== End Of Log ============================