Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


Plagegeister aller Art und deren Bekämpfung: Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 13.02.2015, 20:15   #1
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


Hallo Leute.

Leider habe ich mir bei irgendeinem Freeware Download dieses mistige "Positive Finds" mit eingefangen. Es ist total nervig und ich habe alle mir bekannten Dinge oder auch Googles Ratschläge unternommen, ohne Erfolg.

Bitte Hilfe.

Das kann und darf kein dauernder Zustand sein.

Vielen Dank schon einmal.

Alt 13.02.2015, 20:17   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 13.02.2015, 20:21   #3
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

ok Schon gemacht



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by Media Markt (administrator) on VAIO on 13-02-2015 20:06:40
Running from C:\Users\Media Markt\Downloads
Loaded Profiles: Media Markt (Available profiles: Media Markt)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(GoPro) C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqTray.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMx.exe
(Freecom) C:\Windows\Temp\Password.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqCFGo.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(iolo technologies, LLC) C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OIS.EXE
(www.rene-zeidler.de) C:\Users\Media Markt\Desktop\Snipping Tool Plus.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1322712 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-05-30] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [534232 2013-09-16] (Broadcom Corporation.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATLauncher] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [ATUninstallIcon] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createuninstallentry:1
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95536 2013-11-01] (Sensible Vision )
HKLM-x32\...\Run: [SHIWebOnDiskManager] => C:\Program Files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe [245760 2012-08-08] (SHI Elektronische Medien GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SCLicense] => 欀
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-31] (APN)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [Google Update] => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-03] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [GoogleChromeAutoLaunch_BB5A9D4CE38EA510829CF43B1FF0D9C5] => C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {6e7b5a2b-7dff-11e3-bec2-82581ea6ab58} - "D:\Password.exe" 
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {a2fbda59-a1dd-11e3-bedb-240a6426a8fe} - "F:\setup.exe" 
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OpenLimit AutoStart.lnk
ShortcutTarget: OpenLimit AutoStart.lnk -> C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe (OPENLiMiT SignCubes GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password.lnk
ShortcutTarget: Password.lnk -> C:\Windows\Temp\Password.exe (Freecom)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: [SiQIconOverlay1] -> {4A6220DC-06E8-41d1-9553-AE7A1A2B8928} => C:\Program Files (x86)\OPENLiMiT\siqSHXn.dll (OPENLiMiT SignCubes GmbH)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
SearchScopes: HKLM -> DefaultScope {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKLM -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0103&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0CyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=270588048&ir=
BHO: The Amazon 1Button App for IE -> {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} -> C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Positive Finds -> {30c85a3d-1d96-4589-b63f-91fb7ef45a41} -> C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll No File
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}: [NameServer] 139.7.30.126,139.7.30.125

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2014-01-18]
FF HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-23]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.ch/ig?hl=de&source=iglk
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-13]
CHR Extension: (YouTube) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-03]
CHR Extension: (Google-Suche) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-03]
CHR Extension: (Donna Karan) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijgnliiiplghalknhobbcngpcngaoji [2015-02-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-17]
CHR Extension: (Google Wallet) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-03]
CHR Extension: (Google Mail) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-03]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-23]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM-x32\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-31] (APN LLC.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-26] (Broadcom Corporation.)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] () [File not signed]
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-01-21] (WildTangent)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-07] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-07] (Intel Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-20] (Realtek Semiconductor)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-15] (Avira Operations GmbH & Co. KG)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [367832 2014-03-14] (Broadcom Corp)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [31744 2013-08-22] (Microsoft Corporation)
S3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-10] (Broadcom Corporation.)
S3 facap; C:\Windows\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24056 2013-03-25] (Intel Corporation)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99832 2013-03-25] (Intel Corporation)
S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [84472 2013-03-25] (Intel Corporation)
R3 iaLPSS_UART; C:\Windows\System32\drivers\iaLPSS_UART.sys [142840 2013-03-25] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-10-05] (Intel Corporation)
R3 IntelSensorSolutionAcpi; C:\Windows\System32\drivers\IntelSensorSolutionAcpi.sys [23288 2014-03-30] (Intel® Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99800 2013-05-07] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242392 2013-07-01] (Realtek Semiconductor Corp.)
R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2014-12-27] ()
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2014-03-30] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [41200 2013-05-30] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:06 - 2015-02-13 20:06 - 00033979 ____C () C:\Users\Media Markt\Downloads\FRST.txt
2015-02-13 20:04 - 2015-02-13 20:06 - 00000000 ___DC () C:\FRST
2015-02-13 20:04 - 2015-02-13 20:04 - 02134016 ____C (Farbar) C:\Users\Media Markt\Downloads\FRST64.exe
2015-02-13 19:45 - 2015-02-13 20:06 - 00000000 ____D () C:\Program Files\Reimage
2015-02-13 19:38 - 2015-02-13 19:59 - 00000158 _____ () C:\WINDOWS\Reimage.ini
2015-02-13 19:38 - 2015-02-13 19:38 - 00775968 ____C (Reimage®) C:\Users\Media Markt\Downloads\ReimageRepair.exe
2015-02-13 19:22 - 2015-02-13 19:22 - 00001580 ____C () C:\Users\Media Markt\Desktop\Fixlist.txt
2015-02-12 16:45 - 2015-02-12 16:45 - 00000077 _____ () C:\WINDOWS\setupact.log
2015-02-12 16:45 - 2015-02-12 16:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-12 15:41 - 2015-02-12 15:41 - 00002784 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-02-12 15:41 - 2015-02-12 15:41 - 00000834 ____C () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 15:41 - 2015-02-12 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 15:39 - 2015-02-12 15:40 - 04196968 ____C (Piriform Ltd) C:\Users\Media Markt\Downloads\ccsetup502_slim.exe
2015-02-11 19:05 - 2015-02-11 19:13 - 648437419 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID Full HD.mp4
2015-02-11 18:58 - 2015-02-11 19:00 - 93298507 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID for Mobile.mp4
2015-02-11 18:48 - 2015-02-11 18:53 - 327045434 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID.mp4
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Skype
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\ProgramData\Skype
2015-02-11 18:35 - 2015-02-11 18:35 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Skype
2015-02-11 18:28 - 2015-02-11 18:28 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\TuneUp Software
2015-02-11 18:21 - 2015-02-12 15:36 - 00000000 ____D () C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602
2015-02-11 18:21 - 2015-02-11 18:21 - 00001257 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\RHEng
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-11 18:14 - 2015-02-11 18:15 - 03533008 ____C (DVDVideoSoft Ltd. ) C:\Users\Media Markt\Downloads\FreeYouTubeToMP3Converter.exe
2015-02-11 17:51 - 2015-02-04 00:38 - 00227328 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00761856 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00414208 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 01098752 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00894464 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00609280 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 17:51 - 2015-01-19 19:42 - 01487976 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 17:51 - 2014-12-09 00:12 - 00391526 ____C () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 16:27 - 2015-02-11 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-11 16:23 - 2015-02-12 15:30 - 00210464 ____C () C:\Users\Media Markt\Desktop\ein tag am wurmberg.gcs
2015-02-11 16:20 - 2015-02-11 16:26 - 42096984 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\QuickTimeInstaller.exe
2015-02-11 15:52 - 2015-02-11 17:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-11 15:42 - 2015-02-11 16:23 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\GoPro
2015-02-11 15:42 - 2015-02-11 15:43 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00001124 ____C () C:\Users\Media Markt\Desktop\GoPro Studio.lnk
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\CineForm
2015-02-11 15:41 - 2015-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-11 15:41 - 2015-02-11 15:58 - 00000000 ____D () C:\Users\Public\CineForm
2015-02-11 15:41 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\GoPro
2015-02-11 15:15 - 2015-02-11 15:39 - 163904608 ____C () C:\Users\Media Markt\Downloads\GoProStudioPC-2.5.4.404.exe
2015-02-11 14:56 - 2015-01-15 23:43 - 00563504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 14:56 - 2015-01-15 23:43 - 00177984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 14:56 - 2015-01-14 05:22 - 00445440 ____C (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 14:56 - 2015-01-14 04:53 - 00324096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 14:56 - 2015-01-13 23:11 - 01762840 ____C (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-13 23:04 - 01489072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-10 10:10 - 07472960 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 14:56 - 2015-01-10 10:10 - 01733440 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 14:56 - 2015-01-10 09:28 - 01498360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 14:56 - 2014-12-09 04:45 - 00393728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 14:56 - 2014-12-09 02:56 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 14:56 - 2014-10-29 03:51 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:50 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 14:56 - 2014-10-29 02:57 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:31 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 14:56 - 2014-10-29 02:14 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:32 - 06041088 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:29 - 04300800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 ____C (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-12 03:48 - 00584192 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:47 - 00088064 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 03:34 - 00816128 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 14:50 - 2015-01-12 03:21 - 00490496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 03:08 - 00503296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:07 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 14:50 - 2015-01-12 03:05 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 02:58 - 01032704 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:55 - 00664064 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 14:50 - 2015-01-12 02:51 - 00262144 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00801280 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00718848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 14:50 - 2015-01-12 02:48 - 00374272 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:46 - 02125824 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:45 - 00418304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 02:34 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 14:50 - 2015-01-12 02:30 - 00880128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02865152 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02358272 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 14:50 - 2015-01-12 02:25 - 00230400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 02052608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:23 - 00688640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 00327168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:14 - 01548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 14:50 - 2015-01-12 02:02 - 00800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 14:50 - 2015-01-12 02:00 - 01888256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 14:50 - 2015-01-12 01:56 - 01307136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 14:50 - 2015-01-12 01:55 - 00710144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 14:43 - 2015-01-10 09:22 - 04175872 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-09 22:51 - 2015-02-09 22:51 - 00000000 ____D () C:\WINDOWS\de
2015-02-09 22:50 - 2015-02-09 22:50 - 00001390 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-09 22:50 - 2015-02-09 22:50 - 00001321 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-09 22:47 - 2015-02-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-09 22:47 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-02-09 22:45 - 2015-02-09 22:55 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Windows Live
2015-02-09 22:44 - 2015-02-09 22:44 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web (1).exe
2015-02-09 22:43 - 2015-02-09 22:43 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web.exe
2015-02-09 14:30 - 2015-02-09 14:30 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Outlook-Dateien
2015-02-08 19:43 - 2015-02-08 20:14 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Skitag Wurmberg 08.02.2015
2015-02-04 20:34 - 2015-01-19 16:00 - 74686645 ____C () C:\Users\Media Markt\Desktop\Radikalführen_ep9_A15EO1LOWQHQLI.aax
2015-02-03 23:20 - 2015-02-04 20:33 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Audible
2015-02-03 15:10 - 2015-02-03 15:10 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Gopro alt Zermatt Thun
2015-01-31 19:36 - 2015-01-31 19:37 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Testordner Scheisstunes
2015-01-31 18:13 - 2015-01-31 18:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00001765 ____C () C:\Users\Public\Desktop\iTunes.lnk
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-31 18:13 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\Program Files\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\iPod
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-31 17:46 - 2015-01-31 18:07 - 152439600 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\itunes6464setup.exe
2015-01-31 01:18 - 2015-01-31 01:18 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 16:53 - 2015-01-28 16:55 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam
2015-01-23 20:34 - 2015-01-23 20:34 - 00006394 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799547623-2300.mp4
2015-01-23 20:34 - 2015-01-23 20:34 - 00006019 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799450433-2016.mp4
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\APN
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2015-01-20 22:24 - 2015-01-20 22:24 - 00000026 _____ () C:\WINDOWS\SysWOW64\BatTestUACin_SysRt1436.batemp
2015-01-20 22:23 - 2015-01-20 22:23 - 00000000 ____D () C:\WINDOWS\AB22EC1B65684CE98B97C6FBC47F9BC5.TMP
2015-01-19 15:49 - 2015-01-19 15:49 - 00000294 ____C () C:\Users\Media Markt\Downloads\BK_CAMP_000186DE_LC_64_44100_ster_A15EO1LOWQHQLI.adh
2015-01-14 14:05 - 2014-12-19 07:26 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 14:05 - 2014-12-12 03:04 - 00087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 14:05 - 2014-12-12 01:51 - 00075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 14:05 - 2014-12-09 02:50 - 00225280 ____C (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00535640 ____C (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00531616 ____C (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00448792 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00413248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00372408 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00108944 ____C (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00038264 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-08 20:42 - 00033584 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-06 04:17 - 00360448 ____C (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 14:05 - 2014-12-06 02:41 - 00391680 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 14:05 - 2014-12-06 02:35 - 00229888 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 14:05 - 2014-10-29 05:00 - 00465320 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 14:05 - 2014-10-29 05:00 - 00139984 ____C (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:52 - 00500016 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00482872 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00394120 ____C (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00272248 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00413136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00136296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:07 - 00424544 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00370424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00344536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 03:44 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:59 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:24 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 14:05 - 2014-10-29 02:02 - 00911360 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 14:05 - 2014-10-29 02:01 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:04 - 2014-03-22 15:36 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\ClassicShell
2015-02-13 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-13 19:41 - 2014-03-31 20:41 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2014-03-31 20:41 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-02-13 19:26 - 2013-11-03 14:56 - 00001154 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job
2015-02-13 19:18 - 2014-02-06 23:19 - 00001128 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 18:01 - 2014-02-07 19:51 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{962BA8C8-294A-413A-A87B-366529D5488D}
2015-02-13 16:49 - 2014-01-18 02:43 - 01764070 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-13 15:18 - 2014-02-06 23:19 - 00001124 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 13:07 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-13 13:07 - 2013-08-17 17:05 - 00000000 ___DC () C:\WINDOWS\system32\MRT
2015-02-13 13:01 - 2013-08-17 17:05 - 116773704 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-13 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-13 12:59 - 2014-12-12 13:03 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-13 12:59 - 2014-07-21 05:14 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-13 11:46 - 2013-11-14 08:27 - 01804092 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-13 11:46 - 2013-11-14 08:11 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-13 11:46 - 2013-11-14 08:11 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-13 11:43 - 2014-01-18 07:47 - 00000000 ___DO () C:\Users\Media Markt\SkyDrive
2015-02-12 17:45 - 2013-07-27 13:46 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-721494759-1310166264-1152750241-1001
2015-02-12 16:45 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-12 16:45 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-12 15:44 - 2014-01-15 17:48 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DAEMON Tools Lite
2015-02-12 15:43 - 2014-02-23 10:20 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 15:43 - 2014-01-18 02:36 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-12 10:02 - 2013-11-03 14:56 - 00001102 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job
2015-02-11 22:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-11 19:01 - 2014-03-19 12:41 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\vlc
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 _SHDC () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 ___DC () C:\ProgramData\TuneUp Software
2015-02-11 18:22 - 2014-01-13 12:10 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DVDVideoSoft
2015-02-11 18:21 - 2014-03-23 11:05 - 00001548 ____C () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft
2015-02-11 17:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-11 17:44 - 2013-08-22 15:44 - 00400024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 17:41 - 2014-01-14 18:14 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2015-02-11 17:41 - 2013-07-27 12:20 - 00000000 ___DC () C:\ProgramData\Package Cache
2015-02-11 15:41 - 2014-03-29 23:21 - 00000000 ____D () C:\Program Files\DIFX
2015-02-10 22:09 - 2014-05-12 22:00 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Philipp
2015-02-09 22:48 - 2014-01-16 17:41 - 00000000 ___DC () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-02-09 20:41 - 2014-12-22 11:57 - 00000000 ____D () C:\Users\Media Markt\Desktop\Youtube mix
2015-02-06 15:13 - 2014-02-06 23:19 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 15:13 - 2014-02-06 23:19 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 09:47 - 2014-02-13 23:30 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Audible
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 08:21 - 2013-11-03 14:56 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA
2015-02-03 08:21 - 2013-11-03 14:56 - 00003732 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core
2015-01-31 19:38 - 2014-02-12 16:38 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\TeamViewer
2015-01-31 01:19 - 2013-07-27 12:42 - 00000000 ___DC () C:\Program Files\Sony
2015-01-31 01:19 - 2013-07-27 12:12 - 00000000 ___DC () C:\Program Files (x86)\Sony
2015-01-21 19:54 - 2013-07-27 12:24 - 00000000 ___DC () C:\Program Files (x86)\WildTangent Games
2015-01-21 01:17 - 2014-08-02 07:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 01:16 - 2014-10-03 16:27 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-21 01:12 - 2014-04-28 11:27 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Arbeit Magdeburg Enrico Stehr
2015-01-20 22:26 - 2014-09-02 08:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Deployment
2015-01-20 22:26 - 2014-01-26 15:54 - 00000000 ____D () C:\ProgramData\Valentin EnergieSoftware
2015-01-20 22:25 - 2013-07-27 12:42 - 00000000 ___DC () C:\ProgramData\Sony Corporation
2015-01-20 22:25 - 2013-07-27 12:04 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 18:48 - 2013-07-27 13:40 - 00000000 ___DC () C:\Users\Media Markt\AppData\Local\Packages

==================== Files in the root of some directories =======

2014-01-13 21:18 - 2014-07-16 13:28 - 0000051 ____C () C:\Users\Media Markt\AppData\Roaming\cdwd.ini
2014-01-13 21:27 - 2014-07-16 13:31 - 0000320 ____C () C:\Users\Media Markt\AppData\Roaming\PrjHistorie.001
2014-01-22 16:42 - 2014-02-11 21:23 - 0000136 _____ () C:\Users\Media Markt\AppData\Roaming\WB.CFG
2014-01-22 16:42 - 2014-01-22 16:42 - 0000005 _____ () C:\Users\Media Markt\AppData\Roaming\WBPU-TTL.DAT
2014-01-13 21:18 - 2014-01-13 21:18 - 0000099 ____C () C:\Users\Media Markt\AppData\Local\fusioncache.dat
2014-01-11 17:41 - 2014-01-12 10:28 - 0007609 ____C () C:\Users\Media Markt\AppData\Local\Resmon.ResmonCfg
2014-01-18 02:38 - 2014-01-18 02:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-29 17:39 - 2014-04-29 17:40 - 0000650 _____ () C:\ProgramData\MF_Installer_Data.inf

Files to move or delete:
====================
C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL


Some content of TEMP:
====================
C:\Users\Media Markt\AppData\Local\Temp\avgnt.exe
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Media Markt\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Media Markt\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.exe
C:\Users\Media Markt\AppData\Local\Temp\Uninstaller.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 12:59

==================== End Of Log ============================
--- --- ---
__________________
Alt 13.02.2015, 20:23   #4
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Ist das richtig?



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by Media Markt (administrator) on VAIO on 13-02-2015 20:06:40
Running from C:\Users\Media Markt\Downloads
Loaded Profiles: Media Markt (Available profiles: Media Markt)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(GoPro) C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqTray.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMx.exe
(Freecom) C:\Windows\Temp\Password.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqCFGo.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(iolo technologies, LLC) C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OIS.EXE
(www.rene-zeidler.de) C:\Users\Media Markt\Desktop\Snipping Tool Plus.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1322712 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-05-30] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [534232 2013-09-16] (Broadcom Corporation.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATLauncher] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [ATUninstallIcon] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createuninstallentry:1
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95536 2013-11-01] (Sensible Vision )
HKLM-x32\...\Run: [SHIWebOnDiskManager] => C:\Program Files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe [245760 2012-08-08] (SHI Elektronische Medien GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SCLicense] => 欀
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-31] (APN)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [Google Update] => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-03] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [GoogleChromeAutoLaunch_BB5A9D4CE38EA510829CF43B1FF0D9C5] => C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {6e7b5a2b-7dff-11e3-bec2-82581ea6ab58} - "D:\Password.exe" 
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {a2fbda59-a1dd-11e3-bedb-240a6426a8fe} - "F:\setup.exe" 
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OpenLimit AutoStart.lnk
ShortcutTarget: OpenLimit AutoStart.lnk -> C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe (OPENLiMiT SignCubes GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password.lnk
ShortcutTarget: Password.lnk -> C:\Windows\Temp\Password.exe (Freecom)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: [SiQIconOverlay1] -> {4A6220DC-06E8-41d1-9553-AE7A1A2B8928} => C:\Program Files (x86)\OPENLiMiT\siqSHXn.dll (OPENLiMiT SignCubes GmbH)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
SearchScopes: HKLM -> DefaultScope {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKLM -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0103&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0CyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=270588048&ir=
BHO: The Amazon 1Button App for IE -> {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} -> C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Positive Finds -> {30c85a3d-1d96-4589-b63f-91fb7ef45a41} -> C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll No File
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}: [NameServer] 139.7.30.126,139.7.30.125

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2014-01-18]
FF HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-23]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.ch/ig?hl=de&source=iglk
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-13]
CHR Extension: (YouTube) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-03]
CHR Extension: (Google-Suche) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-03]
CHR Extension: (Donna Karan) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijgnliiiplghalknhobbcngpcngaoji [2015-02-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-17]
CHR Extension: (Google Wallet) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-03]
CHR Extension: (Google Mail) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-03]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-23]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM-x32\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-31] (APN LLC.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-26] (Broadcom Corporation.)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] () [File not signed]
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-01-21] (WildTangent)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-07] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-07] (Intel Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-20] (Realtek Semiconductor)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-15] (Avira Operations GmbH & Co. KG)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [367832 2014-03-14] (Broadcom Corp)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [31744 2013-08-22] (Microsoft Corporation)
S3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-10] (Broadcom Corporation.)
S3 facap; C:\Windows\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24056 2013-03-25] (Intel Corporation)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99832 2013-03-25] (Intel Corporation)
S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [84472 2013-03-25] (Intel Corporation)
R3 iaLPSS_UART; C:\Windows\System32\drivers\iaLPSS_UART.sys [142840 2013-03-25] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-10-05] (Intel Corporation)
R3 IntelSensorSolutionAcpi; C:\Windows\System32\drivers\IntelSensorSolutionAcpi.sys [23288 2014-03-30] (Intel® Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99800 2013-05-07] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242392 2013-07-01] (Realtek Semiconductor Corp.)
R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2014-12-27] ()
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2014-03-30] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [41200 2013-05-30] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:06 - 2015-02-13 20:06 - 00033979 ____C () C:\Users\Media Markt\Downloads\FRST.txt
2015-02-13 20:04 - 2015-02-13 20:06 - 00000000 ___DC () C:\FRST
2015-02-13 20:04 - 2015-02-13 20:04 - 02134016 ____C (Farbar) C:\Users\Media Markt\Downloads\FRST64.exe
2015-02-13 19:45 - 2015-02-13 20:06 - 00000000 ____D () C:\Program Files\Reimage
2015-02-13 19:38 - 2015-02-13 19:59 - 00000158 _____ () C:\WINDOWS\Reimage.ini
2015-02-13 19:38 - 2015-02-13 19:38 - 00775968 ____C (Reimage®) C:\Users\Media Markt\Downloads\ReimageRepair.exe
2015-02-13 19:22 - 2015-02-13 19:22 - 00001580 ____C () C:\Users\Media Markt\Desktop\Fixlist.txt
2015-02-12 16:45 - 2015-02-12 16:45 - 00000077 _____ () C:\WINDOWS\setupact.log
2015-02-12 16:45 - 2015-02-12 16:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-12 15:41 - 2015-02-12 15:41 - 00002784 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-02-12 15:41 - 2015-02-12 15:41 - 00000834 ____C () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 15:41 - 2015-02-12 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 15:39 - 2015-02-12 15:40 - 04196968 ____C (Piriform Ltd) C:\Users\Media Markt\Downloads\ccsetup502_slim.exe
2015-02-11 19:05 - 2015-02-11 19:13 - 648437419 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID Full HD.mp4
2015-02-11 18:58 - 2015-02-11 19:00 - 93298507 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID for Mobile.mp4
2015-02-11 18:48 - 2015-02-11 18:53 - 327045434 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID.mp4
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Skype
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\ProgramData\Skype
2015-02-11 18:35 - 2015-02-11 18:35 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Skype
2015-02-11 18:28 - 2015-02-11 18:28 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\TuneUp Software
2015-02-11 18:21 - 2015-02-12 15:36 - 00000000 ____D () C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602
2015-02-11 18:21 - 2015-02-11 18:21 - 00001257 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\RHEng
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-11 18:14 - 2015-02-11 18:15 - 03533008 ____C (DVDVideoSoft Ltd. ) C:\Users\Media Markt\Downloads\FreeYouTubeToMP3Converter.exe
2015-02-11 17:51 - 2015-02-04 00:38 - 00227328 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00761856 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00414208 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 01098752 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00894464 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00609280 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 17:51 - 2015-01-19 19:42 - 01487976 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 17:51 - 2014-12-09 00:12 - 00391526 ____C () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 16:27 - 2015-02-11 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-11 16:23 - 2015-02-12 15:30 - 00210464 ____C () C:\Users\Media Markt\Desktop\ein tag am wurmberg.gcs
2015-02-11 16:20 - 2015-02-11 16:26 - 42096984 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\QuickTimeInstaller.exe
2015-02-11 15:52 - 2015-02-11 17:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-11 15:42 - 2015-02-11 16:23 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\GoPro
2015-02-11 15:42 - 2015-02-11 15:43 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00001124 ____C () C:\Users\Media Markt\Desktop\GoPro Studio.lnk
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\CineForm
2015-02-11 15:41 - 2015-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-11 15:41 - 2015-02-11 15:58 - 00000000 ____D () C:\Users\Public\CineForm
2015-02-11 15:41 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\GoPro
2015-02-11 15:15 - 2015-02-11 15:39 - 163904608 ____C () C:\Users\Media Markt\Downloads\GoProStudioPC-2.5.4.404.exe
2015-02-11 14:56 - 2015-01-15 23:43 - 00563504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 14:56 - 2015-01-15 23:43 - 00177984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 14:56 - 2015-01-14 05:22 - 00445440 ____C (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 14:56 - 2015-01-14 04:53 - 00324096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 14:56 - 2015-01-13 23:11 - 01762840 ____C (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-13 23:04 - 01489072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-10 10:10 - 07472960 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 14:56 - 2015-01-10 10:10 - 01733440 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 14:56 - 2015-01-10 09:28 - 01498360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 14:56 - 2014-12-09 04:45 - 00393728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 14:56 - 2014-12-09 02:56 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 14:56 - 2014-10-29 03:51 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:50 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 14:56 - 2014-10-29 02:57 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:31 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 14:56 - 2014-10-29 02:14 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:32 - 06041088 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:29 - 04300800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 ____C (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-12 03:48 - 00584192 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:47 - 00088064 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 03:34 - 00816128 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 14:50 - 2015-01-12 03:21 - 00490496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 03:08 - 00503296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:07 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 14:50 - 2015-01-12 03:05 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 02:58 - 01032704 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:55 - 00664064 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 14:50 - 2015-01-12 02:51 - 00262144 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00801280 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00718848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 14:50 - 2015-01-12 02:48 - 00374272 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:46 - 02125824 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:45 - 00418304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 02:34 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 14:50 - 2015-01-12 02:30 - 00880128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02865152 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02358272 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 14:50 - 2015-01-12 02:25 - 00230400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 02052608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:23 - 00688640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 00327168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:14 - 01548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 14:50 - 2015-01-12 02:02 - 00800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 14:50 - 2015-01-12 02:00 - 01888256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 14:50 - 2015-01-12 01:56 - 01307136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 14:50 - 2015-01-12 01:55 - 00710144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 14:43 - 2015-01-10 09:22 - 04175872 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-09 22:51 - 2015-02-09 22:51 - 00000000 ____D () C:\WINDOWS\de
2015-02-09 22:50 - 2015-02-09 22:50 - 00001390 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-09 22:50 - 2015-02-09 22:50 - 00001321 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-09 22:47 - 2015-02-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-09 22:47 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-02-09 22:45 - 2015-02-09 22:55 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Windows Live
2015-02-09 22:44 - 2015-02-09 22:44 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web (1).exe
2015-02-09 22:43 - 2015-02-09 22:43 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web.exe
2015-02-09 14:30 - 2015-02-09 14:30 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Outlook-Dateien
2015-02-08 19:43 - 2015-02-08 20:14 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Skitag Wurmberg 08.02.2015
2015-02-04 20:34 - 2015-01-19 16:00 - 74686645 ____C () C:\Users\Media Markt\Desktop\Radikalführen_ep9_A15EO1LOWQHQLI.aax
2015-02-03 23:20 - 2015-02-04 20:33 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Audible
2015-02-03 15:10 - 2015-02-03 15:10 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Gopro alt Zermatt Thun
2015-01-31 19:36 - 2015-01-31 19:37 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Testordner Scheisstunes
2015-01-31 18:13 - 2015-01-31 18:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00001765 ____C () C:\Users\Public\Desktop\iTunes.lnk
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-31 18:13 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\Program Files\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\iPod
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-31 17:46 - 2015-01-31 18:07 - 152439600 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\itunes6464setup.exe
2015-01-31 01:18 - 2015-01-31 01:18 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 16:53 - 2015-01-28 16:55 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam
2015-01-23 20:34 - 2015-01-23 20:34 - 00006394 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799547623-2300.mp4
2015-01-23 20:34 - 2015-01-23 20:34 - 00006019 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799450433-2016.mp4
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\APN
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2015-01-20 22:24 - 2015-01-20 22:24 - 00000026 _____ () C:\WINDOWS\SysWOW64\BatTestUACin_SysRt1436.batemp
2015-01-20 22:23 - 2015-01-20 22:23 - 00000000 ____D () C:\WINDOWS\AB22EC1B65684CE98B97C6FBC47F9BC5.TMP
2015-01-19 15:49 - 2015-01-19 15:49 - 00000294 ____C () C:\Users\Media Markt\Downloads\BK_CAMP_000186DE_LC_64_44100_ster_A15EO1LOWQHQLI.adh
2015-01-14 14:05 - 2014-12-19 07:26 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 14:05 - 2014-12-12 03:04 - 00087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 14:05 - 2014-12-12 01:51 - 00075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 14:05 - 2014-12-09 02:50 - 00225280 ____C (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00535640 ____C (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00531616 ____C (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00448792 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00413248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00372408 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00108944 ____C (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00038264 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-08 20:42 - 00033584 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-06 04:17 - 00360448 ____C (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 14:05 - 2014-12-06 02:41 - 00391680 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 14:05 - 2014-12-06 02:35 - 00229888 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 14:05 - 2014-10-29 05:00 - 00465320 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 14:05 - 2014-10-29 05:00 - 00139984 ____C (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:52 - 00500016 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00482872 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00394120 ____C (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00272248 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00413136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00136296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:07 - 00424544 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00370424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00344536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 03:44 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:59 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:24 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 14:05 - 2014-10-29 02:02 - 00911360 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 14:05 - 2014-10-29 02:01 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:04 - 2014-03-22 15:36 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\ClassicShell
2015-02-13 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-13 19:41 - 2014-03-31 20:41 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2014-03-31 20:41 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-02-13 19:26 - 2013-11-03 14:56 - 00001154 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job
2015-02-13 19:18 - 2014-02-06 23:19 - 00001128 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 18:01 - 2014-02-07 19:51 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{962BA8C8-294A-413A-A87B-366529D5488D}
2015-02-13 16:49 - 2014-01-18 02:43 - 01764070 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-13 15:18 - 2014-02-06 23:19 - 00001124 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 13:07 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-13 13:07 - 2013-08-17 17:05 - 00000000 ___DC () C:\WINDOWS\system32\MRT
2015-02-13 13:01 - 2013-08-17 17:05 - 116773704 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-13 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-13 12:59 - 2014-12-12 13:03 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-13 12:59 - 2014-07-21 05:14 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-13 11:46 - 2013-11-14 08:27 - 01804092 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-13 11:46 - 2013-11-14 08:11 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-13 11:46 - 2013-11-14 08:11 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-13 11:43 - 2014-01-18 07:47 - 00000000 ___DO () C:\Users\Media Markt\SkyDrive
2015-02-12 17:45 - 2013-07-27 13:46 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-721494759-1310166264-1152750241-1001
2015-02-12 16:45 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-12 16:45 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-12 15:44 - 2014-01-15 17:48 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DAEMON Tools Lite
2015-02-12 15:43 - 2014-02-23 10:20 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 15:43 - 2014-01-18 02:36 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-12 10:02 - 2013-11-03 14:56 - 00001102 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job
2015-02-11 22:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-11 19:01 - 2014-03-19 12:41 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\vlc
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 _SHDC () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 ___DC () C:\ProgramData\TuneUp Software
2015-02-11 18:22 - 2014-01-13 12:10 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DVDVideoSoft
2015-02-11 18:21 - 2014-03-23 11:05 - 00001548 ____C () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft
2015-02-11 17:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-11 17:44 - 2013-08-22 15:44 - 00400024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 17:41 - 2014-01-14 18:14 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2015-02-11 17:41 - 2013-07-27 12:20 - 00000000 ___DC () C:\ProgramData\Package Cache
2015-02-11 15:41 - 2014-03-29 23:21 - 00000000 ____D () C:\Program Files\DIFX
2015-02-10 22:09 - 2014-05-12 22:00 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Philipp
2015-02-09 22:48 - 2014-01-16 17:41 - 00000000 ___DC () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-02-09 20:41 - 2014-12-22 11:57 - 00000000 ____D () C:\Users\Media Markt\Desktop\Youtube mix
2015-02-06 15:13 - 2014-02-06 23:19 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 15:13 - 2014-02-06 23:19 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 09:47 - 2014-02-13 23:30 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Audible
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 08:21 - 2013-11-03 14:56 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA
2015-02-03 08:21 - 2013-11-03 14:56 - 00003732 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core
2015-01-31 19:38 - 2014-02-12 16:38 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\TeamViewer
2015-01-31 01:19 - 2013-07-27 12:42 - 00000000 ___DC () C:\Program Files\Sony
2015-01-31 01:19 - 2013-07-27 12:12 - 00000000 ___DC () C:\Program Files (x86)\Sony
2015-01-21 19:54 - 2013-07-27 12:24 - 00000000 ___DC () C:\Program Files (x86)\WildTangent Games
2015-01-21 01:17 - 2014-08-02 07:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 01:16 - 2014-10-03 16:27 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-21 01:12 - 2014-04-28 11:27 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Arbeit Magdeburg Enrico Stehr
2015-01-20 22:26 - 2014-09-02 08:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Deployment
2015-01-20 22:26 - 2014-01-26 15:54 - 00000000 ____D () C:\ProgramData\Valentin EnergieSoftware
2015-01-20 22:25 - 2013-07-27 12:42 - 00000000 ___DC () C:\ProgramData\Sony Corporation
2015-01-20 22:25 - 2013-07-27 12:04 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 18:48 - 2013-07-27 13:40 - 00000000 ___DC () C:\Users\Media Markt\AppData\Local\Packages

==================== Files in the root of some directories =======

2014-01-13 21:18 - 2014-07-16 13:28 - 0000051 ____C () C:\Users\Media Markt\AppData\Roaming\cdwd.ini
2014-01-13 21:27 - 2014-07-16 13:31 - 0000320 ____C () C:\Users\Media Markt\AppData\Roaming\PrjHistorie.001
2014-01-22 16:42 - 2014-02-11 21:23 - 0000136 _____ () C:\Users\Media Markt\AppData\Roaming\WB.CFG
2014-01-22 16:42 - 2014-01-22 16:42 - 0000005 _____ () C:\Users\Media Markt\AppData\Roaming\WBPU-TTL.DAT
2014-01-13 21:18 - 2014-01-13 21:18 - 0000099 ____C () C:\Users\Media Markt\AppData\Local\fusioncache.dat
2014-01-11 17:41 - 2014-01-12 10:28 - 0007609 ____C () C:\Users\Media Markt\AppData\Local\Resmon.ResmonCfg
2014-01-18 02:38 - 2014-01-18 02:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-29 17:39 - 2014-04-29 17:40 - 0000650 _____ () C:\ProgramData\MF_Installer_Data.inf

Files to move or delete:
====================
C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL


Some content of TEMP:
====================
C:\Users\Media Markt\AppData\Local\Temp\avgnt.exe
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Media Markt\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Media Markt\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.exe
C:\Users\Media Markt\AppData\Local\Temp\Uninstaller.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 12:59

==================== End Of Log ============================
--- --- ---
Alt 13.02.2015, 21:07   #5
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by Media Markt (administrator) on VAIO on 13-02-2015 20:06:40
Running from C:\Users\Media Markt\Downloads
Loaded Profiles: Media Markt (Available profiles: Media Markt)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(GoPro) C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqTray.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMx.exe
(Freecom) C:\Windows\Temp\Password.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqCFGo.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(iolo technologies, LLC) C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OIS.EXE
(René's Homepage) C:\Users\Media Markt\Desktop\Snipping Tool Plus.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1322712 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-05-30] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [534232 2013-09-16] (Broadcom Corporation.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATLauncher] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [ATUninstallIcon] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createuninstallentry:1
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95536 2013-11-01] (Sensible Vision )
HKLM-x32\...\Run: [SHIWebOnDiskManager] => C:\Program Files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe [245760 2012-08-08] (SHI Elektronische Medien GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SCLicense] => 欀
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-31] (APN)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [Google Update] => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-03] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [GoogleChromeAutoLaunch_BB5A9D4CE38EA510829CF43B1FF0D9C5] => C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {6e7b5a2b-7dff-11e3-bec2-82581ea6ab58} - "D:\Password.exe" 
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {a2fbda59-a1dd-11e3-bedb-240a6426a8fe} - "F:\setup.exe" 
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OpenLimit AutoStart.lnk
ShortcutTarget: OpenLimit AutoStart.lnk -> C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe (OPENLiMiT SignCubes GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password.lnk
ShortcutTarget: Password.lnk -> C:\Windows\Temp\Password.exe (Freecom)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: [SiQIconOverlay1] -> {4A6220DC-06E8-41d1-9553-AE7A1A2B8928} => C:\Program Files (x86)\OPENLiMiT\siqSHXn.dll (OPENLiMiT SignCubes GmbH)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland ? jetzt mit dem Hotmail Nachfolger Outlook und dem Messenger Nachfolger Skype
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000
SearchScopes: HKLM -> DefaultScope {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKLM -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0CtGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=
SearchScopes: HKU\S-1-5-21-721494759-1310166264-1152750241-1001 -> {F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0103&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0CyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=270588048&ir=
BHO: The Amazon 1Button App for IE -> {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} -> C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Positive Finds -> {30c85a3d-1d96-4589-b63f-91fb7ef45a41} -> C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll No File
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}: [NameServer] 139.7.30.126,139.7.30.125

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2014-01-18]
FF HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-23]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.ch/ig?hl=de&source=iglk
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-13]
CHR Extension: (YouTube) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-03]
CHR Extension: (Google-Suche) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-03]
CHR Extension: (Donna Karan) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijgnliiiplghalknhobbcngpcngaoji [2015-02-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-17]
CHR Extension: (Google Wallet) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-03]
CHR Extension: (Google Mail) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-03]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-03-23]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-01-31]
CHR HKLM-x32\...\Chrome\Extension: [feocblgcojafilfbgoineopkngchgaei] - C:\Program Files (x86)\Sensible Vision\Fast Access\chrome_fasso\extension.crx [2013-10-18]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-31] (APN LLC.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-26] (Broadcom Corporation.)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] () [File not signed]
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-01-21] (WildTangent)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-07] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-07] (Intel Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-20] (Realtek Semiconductor)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-15] (Avira Operations GmbH & Co. KG)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [367832 2014-03-14] (Broadcom Corp)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [31744 2013-08-22] (Microsoft Corporation)
S3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-10] (Broadcom Corporation.)
S3 facap; C:\Windows\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24056 2013-03-25] (Intel Corporation)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99832 2013-03-25] (Intel Corporation)
S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [84472 2013-03-25] (Intel Corporation)
R3 iaLPSS_UART; C:\Windows\System32\drivers\iaLPSS_UART.sys [142840 2013-03-25] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-10-05] (Intel Corporation)
R3 IntelSensorSolutionAcpi; C:\Windows\System32\drivers\IntelSensorSolutionAcpi.sys [23288 2014-03-30] (Intel® Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99800 2013-05-07] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242392 2013-07-01] (Realtek Semiconductor Corp.)
R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2014-12-27] ()
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2014-03-30] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [41200 2013-05-30] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:06 - 2015-02-13 20:06 - 00033979 ____C () C:\Users\Media Markt\Downloads\FRST.txt
2015-02-13 20:04 - 2015-02-13 20:06 - 00000000 ___DC () C:\FRST
2015-02-13 20:04 - 2015-02-13 20:04 - 02134016 ____C (Farbar) C:\Users\Media Markt\Downloads\FRST64.exe
2015-02-13 19:45 - 2015-02-13 20:06 - 00000000 ____D () C:\Program Files\Reimage
2015-02-13 19:38 - 2015-02-13 19:59 - 00000158 _____ () C:\WINDOWS\Reimage.ini
2015-02-13 19:38 - 2015-02-13 19:38 - 00775968 ____C (Reimage®) C:\Users\Media Markt\Downloads\ReimageRepair.exe
2015-02-13 19:22 - 2015-02-13 19:22 - 00001580 ____C () C:\Users\Media Markt\Desktop\Fixlist.txt
2015-02-12 16:45 - 2015-02-12 16:45 - 00000077 _____ () C:\WINDOWS\setupact.log
2015-02-12 16:45 - 2015-02-12 16:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-12 15:41 - 2015-02-12 15:41 - 00002784 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-02-12 15:41 - 2015-02-12 15:41 - 00000834 ____C () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 15:41 - 2015-02-12 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 15:39 - 2015-02-12 15:40 - 04196968 ____C (Piriform Ltd) C:\Users\Media Markt\Downloads\ccsetup502_slim.exe
2015-02-11 19:05 - 2015-02-11 19:13 - 648437419 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID Full HD.mp4
2015-02-11 18:58 - 2015-02-11 19:00 - 93298507 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID for Mobile.mp4
2015-02-11 18:48 - 2015-02-11 18:53 - 327045434 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID.mp4
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Skype
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\ProgramData\Skype
2015-02-11 18:35 - 2015-02-11 18:35 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Skype
2015-02-11 18:28 - 2015-02-11 18:28 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\TuneUp Software
2015-02-11 18:21 - 2015-02-12 15:36 - 00000000 ____D () C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602
2015-02-11 18:21 - 2015-02-11 18:21 - 00001257 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\RHEng
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-11 18:14 - 2015-02-11 18:15 - 03533008 ____C (DVDVideoSoft Ltd. ) C:\Users\Media Markt\Downloads\FreeYouTubeToMP3Converter.exe
2015-02-11 17:51 - 2015-02-04 00:38 - 00227328 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00761856 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00414208 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 01098752 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00894464 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00609280 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 17:51 - 2015-01-19 19:42 - 01487976 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 17:51 - 2014-12-09 00:12 - 00391526 ____C () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 16:27 - 2015-02-11 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-11 16:23 - 2015-02-12 15:30 - 00210464 ____C () C:\Users\Media Markt\Desktop\ein tag am wurmberg.gcs
2015-02-11 16:20 - 2015-02-11 16:26 - 42096984 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\QuickTimeInstaller.exe
2015-02-11 15:52 - 2015-02-11 17:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-11 15:42 - 2015-02-11 16:23 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\GoPro
2015-02-11 15:42 - 2015-02-11 15:43 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00001124 ____C () C:\Users\Media Markt\Desktop\GoPro Studio.lnk
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\CineForm
2015-02-11 15:41 - 2015-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-11 15:41 - 2015-02-11 15:58 - 00000000 ____D () C:\Users\Public\CineForm
2015-02-11 15:41 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\GoPro
2015-02-11 15:15 - 2015-02-11 15:39 - 163904608 ____C () C:\Users\Media Markt\Downloads\GoProStudioPC-2.5.4.404.exe
2015-02-11 14:56 - 2015-01-15 23:43 - 00563504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 14:56 - 2015-01-15 23:43 - 00177984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 14:56 - 2015-01-14 05:22 - 00445440 ____C (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 14:56 - 2015-01-14 04:53 - 00324096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 14:56 - 2015-01-13 23:11 - 01762840 ____C (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-13 23:04 - 01489072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-10 10:10 - 07472960 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 14:56 - 2015-01-10 10:10 - 01733440 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 14:56 - 2015-01-10 09:28 - 01498360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 14:56 - 2014-12-09 04:45 - 00393728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 14:56 - 2014-12-09 02:56 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 14:56 - 2014-10-29 03:51 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:50 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 14:56 - 2014-10-29 02:57 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:31 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 14:56 - 2014-10-29 02:14 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:32 - 06041088 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:29 - 04300800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 ____C (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-12 03:48 - 00584192 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:47 - 00088064 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 03:34 - 00816128 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 14:50 - 2015-01-12 03:21 - 00490496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 03:08 - 00503296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:07 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 14:50 - 2015-01-12 03:05 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 02:58 - 01032704 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:55 - 00664064 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 14:50 - 2015-01-12 02:51 - 00262144 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00801280 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00718848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 14:50 - 2015-01-12 02:48 - 00374272 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:46 - 02125824 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:45 - 00418304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 02:34 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 14:50 - 2015-01-12 02:30 - 00880128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02865152 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02358272 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 14:50 - 2015-01-12 02:25 - 00230400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 02052608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:23 - 00688640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 00327168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:14 - 01548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 14:50 - 2015-01-12 02:02 - 00800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 14:50 - 2015-01-12 02:00 - 01888256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 14:50 - 2015-01-12 01:56 - 01307136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 14:50 - 2015-01-12 01:55 - 00710144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 14:43 - 2015-01-10 09:22 - 04175872 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-09 22:51 - 2015-02-09 22:51 - 00000000 ____D () C:\WINDOWS\de
2015-02-09 22:50 - 2015-02-09 22:50 - 00001390 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-09 22:50 - 2015-02-09 22:50 - 00001321 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-09 22:47 - 2015-02-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-09 22:47 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-02-09 22:45 - 2015-02-09 22:55 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Windows Live
2015-02-09 22:44 - 2015-02-09 22:44 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web (1).exe
2015-02-09 22:43 - 2015-02-09 22:43 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web.exe
2015-02-09 14:30 - 2015-02-09 14:30 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Outlook-Dateien
2015-02-08 19:43 - 2015-02-08 20:14 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Skitag Wurmberg 08.02.2015
2015-02-04 20:34 - 2015-01-19 16:00 - 74686645 ____C () C:\Users\Media Markt\Desktop\Radikalführen_ep9_A15EO1LOWQHQLI.aax
2015-02-03 23:20 - 2015-02-04 20:33 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Audible
2015-02-03 15:10 - 2015-02-03 15:10 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Gopro alt Zermatt Thun
2015-01-31 19:36 - 2015-01-31 19:37 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Testordner Scheisstunes
2015-01-31 18:13 - 2015-01-31 18:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00001765 ____C () C:\Users\Public\Desktop\iTunes.lnk
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-31 18:13 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\Program Files\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\iPod
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-31 17:46 - 2015-01-31 18:07 - 152439600 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\itunes6464setup.exe
2015-01-31 01:18 - 2015-01-31 01:18 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 16:53 - 2015-01-28 16:55 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam
2015-01-23 20:34 - 2015-01-23 20:34 - 00006394 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799547623-2300.mp4
2015-01-23 20:34 - 2015-01-23 20:34 - 00006019 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799450433-2016.mp4
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\ProgramData\APN
2015-01-21 01:19 - 2015-01-21 01:19 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2015-01-20 22:24 - 2015-01-20 22:24 - 00000026 _____ () C:\WINDOWS\SysWOW64\BatTestUACin_SysRt1436.batemp
2015-01-20 22:23 - 2015-01-20 22:23 - 00000000 ____D () C:\WINDOWS\AB22EC1B65684CE98B97C6FBC47F9BC5.TMP
2015-01-19 15:49 - 2015-01-19 15:49 - 00000294 ____C () C:\Users\Media Markt\Downloads\BK_CAMP_000186DE_LC_64_44100_ster_A15EO1LOWQHQLI.adh
2015-01-14 14:05 - 2014-12-19 07:26 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 14:05 - 2014-12-12 03:04 - 00087040 ____C (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 14:05 - 2014-12-12 01:51 - 00075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 14:05 - 2014-12-09 02:50 - 00225280 ____C (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00535640 ____C (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00531616 ____C (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00448792 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00413248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00372408 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00108944 ____C (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 14:05 - 2014-12-08 20:42 - 00038264 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-08 20:42 - 00033584 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 14:05 - 2014-12-06 04:17 - 00360448 ____C (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 14:05 - 2014-12-06 02:41 - 00391680 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 14:05 - 2014-12-06 02:35 - 00229888 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 14:05 - 2014-10-29 05:00 - 00465320 ____C (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 14:05 - 2014-10-29 05:00 - 00139984 ____C (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:52 - 00500016 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00482872 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00394120 ____C (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 04:52 - 00272248 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00413136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 14:05 - 2014-10-29 04:12 - 00136296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 14:05 - 2014-10-29 04:07 - 00424544 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00370424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 14:05 - 2014-10-29 04:07 - 00344536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 14:05 - 2014-10-29 03:44 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:59 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 14:05 - 2014-10-29 02:24 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 14:05 - 2014-10-29 02:02 - 00911360 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 14:05 - 2014-10-29 02:01 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 20:04 - 2014-03-22 15:36 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\ClassicShell
2015-02-13 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-13 19:41 - 2014-03-31 20:41 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2014-03-31 20:41 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-13 19:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-02-13 19:26 - 2013-11-03 14:56 - 00001154 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job
2015-02-13 19:18 - 2014-02-06 23:19 - 00001128 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 19:09 - 2014-12-03 11:09 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-13 18:01 - 2014-02-07 19:51 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{962BA8C8-294A-413A-A87B-366529D5488D}
2015-02-13 16:49 - 2014-01-18 02:43 - 01764070 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-13 15:18 - 2014-02-06 23:19 - 00001124 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 13:07 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-13 13:07 - 2013-08-17 17:05 - 00000000 ___DC () C:\WINDOWS\system32\MRT
2015-02-13 13:01 - 2013-08-17 17:05 - 116773704 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-13 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-13 12:59 - 2014-12-12 13:03 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-13 12:59 - 2014-07-21 05:14 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-13 11:46 - 2013-11-14 08:27 - 01804092 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-13 11:46 - 2013-11-14 08:11 - 00775588 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-13 11:46 - 2013-11-14 08:11 - 00163774 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-13 11:43 - 2014-01-18 07:47 - 00000000 ___DO () C:\Users\Media Markt\SkyDrive
2015-02-12 17:45 - 2013-07-27 13:46 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-721494759-1310166264-1152750241-1001
2015-02-12 16:45 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-12 16:45 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-12 15:44 - 2014-01-15 17:48 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DAEMON Tools Lite
2015-02-12 15:43 - 2014-02-23 10:20 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 15:43 - 2014-01-18 02:36 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-12 10:02 - 2013-11-03 14:56 - 00001102 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job
2015-02-11 22:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-11 19:01 - 2014-03-19 12:41 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\vlc
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 _SHDC () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 ___DC () C:\ProgramData\TuneUp Software
2015-02-11 18:22 - 2014-01-13 12:10 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DVDVideoSoft
2015-02-11 18:21 - 2014-03-23 11:05 - 00001548 ____C () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft
2015-02-11 17:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-11 17:44 - 2013-08-22 15:44 - 00400024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 17:41 - 2014-01-14 18:14 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2015-02-11 17:41 - 2013-07-27 12:20 - 00000000 ___DC () C:\ProgramData\Package Cache
2015-02-11 15:41 - 2014-03-29 23:21 - 00000000 ____D () C:\Program Files\DIFX
2015-02-10 22:09 - 2014-05-12 22:00 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Philipp
2015-02-09 22:48 - 2014-01-16 17:41 - 00000000 ___DC () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-02-09 20:41 - 2014-12-22 11:57 - 00000000 ____D () C:\Users\Media Markt\Desktop\Youtube mix
2015-02-06 15:13 - 2014-02-06 23:19 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 15:13 - 2014-02-06 23:19 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 09:47 - 2014-02-13 23:30 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Audible
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 08:21 - 2013-11-03 14:56 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA
2015-02-03 08:21 - 2013-11-03 14:56 - 00003732 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core
2015-01-31 19:38 - 2014-02-12 16:38 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\TeamViewer
2015-01-31 01:19 - 2013-07-27 12:42 - 00000000 ___DC () C:\Program Files\Sony
2015-01-31 01:19 - 2013-07-27 12:12 - 00000000 ___DC () C:\Program Files (x86)\Sony
2015-01-21 19:54 - 2013-07-27 12:24 - 00000000 ___DC () C:\Program Files (x86)\WildTangent Games
2015-01-21 01:17 - 2014-08-02 07:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 01:16 - 2014-10-03 16:27 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-21 01:12 - 2014-04-28 11:27 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Arbeit Magdeburg Enrico Stehr
2015-01-20 22:26 - 2014-09-02 08:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Deployment
2015-01-20 22:26 - 2014-01-26 15:54 - 00000000 ____D () C:\ProgramData\Valentin EnergieSoftware
2015-01-20 22:25 - 2013-07-27 12:42 - 00000000 ___DC () C:\ProgramData\Sony Corporation
2015-01-20 22:25 - 2013-07-27 12:04 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 18:48 - 2013-07-27 13:40 - 00000000 ___DC () C:\Users\Media Markt\AppData\Local\Packages

==================== Files in the root of some directories =======

2014-01-13 21:18 - 2014-07-16 13:28 - 0000051 ____C () C:\Users\Media Markt\AppData\Roaming\cdwd.ini
2014-01-13 21:27 - 2014-07-16 13:31 - 0000320 ____C () C:\Users\Media Markt\AppData\Roaming\PrjHistorie.001
2014-01-22 16:42 - 2014-02-11 21:23 - 0000136 _____ () C:\Users\Media Markt\AppData\Roaming\WB.CFG
2014-01-22 16:42 - 2014-01-22 16:42 - 0000005 _____ () C:\Users\Media Markt\AppData\Roaming\WBPU-TTL.DAT
2014-01-13 21:18 - 2014-01-13 21:18 - 0000099 ____C () C:\Users\Media Markt\AppData\Local\fusioncache.dat
2014-01-11 17:41 - 2014-01-12 10:28 - 0007609 ____C () C:\Users\Media Markt\AppData\Local\Resmon.ResmonCfg
2014-01-18 02:38 - 2014-01-18 02:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-29 17:39 - 2014-04-29 17:40 - 0000650 _____ () C:\ProgramData\MF_Installer_Data.inf

Files to move or delete:
====================
C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL


Some content of TEMP:
====================
C:\Users\Media Markt\AppData\Local\Temp\avgnt.exe
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Media Markt\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Media Markt\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.exe
C:\Users\Media Markt\AppData\Local\Temp\Uninstaller.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 12:59

==================== End Of Log ============================
--- --- ---

--- --- ---


Habe ich jetzt alles richtig gemacht? Habe doch kein plan.

Eine schnelle Hilfe wäre klasse da ich nur 980 kbit/s habe frisst mir der mist jegliche geschwindichkeit beim surfen mit der ohnehin schlechten verbindung.

Vielen Dank


Alt 14.02.2015, 12:10   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


Addition.txt fehlt noch
__________________
--> Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.

Alt 14.02.2015, 14:39   #7
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

sorry das sieht für mich alles gleich aus


FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-02-2015
Ran by Media Markt at 2015-02-14 14:35:26
Running from C:\Users\Media Markt\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
Adobe Reader XI (11.0.06)  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{2FE00055-C4F3-4F7A-AEDD-E198D54CF12F}) (Version: 3.1.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{28791292-D18D-42FA-AE66-3D3D20AA8618}) (Version: 3.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5ED7462B-EF58-4757-B609-53755021EC34}) (Version: 8.1.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 32580328.4759644.48.2147344384 - Audible, Inc.)
Avira (HKLM-x32\...\{9590977b-7b6f-467e-a11a-efa1fae804da}) (Version: 1.1.18.30000 - Avira Operations GmbH & Co. KG)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
BCL easyConverter 3.0 Licensing Module (BCL License) (x32 Version: 3.0.18 - BCL Technologies) Hidden
BCL easyConverter 3.0 Loader SDK Module (x32 Version: 3.0.18 - BCL Technologies) Hidden
BCL easyConverter 3.0 Module (Loader, BCL License) (x32 Version: 3.0.18 - BCL Technologies) Hidden
BCL easyConverter 3.0 Module (RTF, BCL License) (x32 Version: 3.0.18 - BCL Technologies) Hidden
BCL easyConverter 3.0 RTF SDK Module (x32 Version: 3.0.18 - BCL Technologies) Hidden
BCL easyConverter 3.0 SDK Module (x32 Version: 3.0.18 - BCL Technologies) Hidden
Behind The Reflection 2: Witch's Revenge (x32 Version: 3.0.2.32 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version:  - Broadcom Corporation)
Build-a-lot: On Vacation (x32 Version: 2.2.0.110 - WildTangent) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Classic Shell (HKLM\...\{2368907C-E8F6-4750-A023-254C3E2B5E8D}) (Version: 4.0.4 - IvoSoft)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dietrich's AG PlanCAD-L (HKLM-x32\...\{B64B2351-10AE-4890-9D5E-F9BDC292801D}_is1) (Version: 11.01 - Dietrich's AG)
Einstellungen für VAIO Media Server (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.1.0.02220 - Sony Corporation)
Enchanted Cavern 2 (x32 Version: 2.2.0.110 - WildTangent) Hidden
Epson Easy Photo Print 2 (HKLM-x32\...\{674E262F-72EA-41C1-AF16-9727311A4553}) (Version: 2.4.1.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{116DBCAF-9544-4592-9156-AC99F6C2D426}) (Version: 3.10.0016 - Seiko Epson Corporation)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.21.00 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-610 Series Printer Uninstall (HKLM\...\EPSON XP-610 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.1.0 - SEIKO EPSON CORPORATION)
ESDL (x32 Version: 1.0.0 - Sony Corporation) Hidden
FastAccess (HKLM\...\{4162CC75-E271-4F62-8905-988B5FD9F8BD}) (Version: 4.1.160.1 - Sensible Vision)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.30.319 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.30.319 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Google Chrome (HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.)
Heroes of Hellas 3: Athens (x32 Version: 3.0.2.32 - WildTangent) Hidden
HUAWEI DataCard Driver 4.25.23.04 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.25.23.04 - Huawei technologies Co., Ltd.)
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41800) (Version: 3.8.0.41800.66 - Intel)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1015 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.2.1489 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.0.1.121 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{28B4FCD3-1E17-411F-B56A-769DCF9169E0}) (Version: 4.1.14.0 - Intel Corporation)
iTunes (HKLM\...\{7B8D4E8A-EA2B-4A71-BFEB-A4AAAB87C5D0}) (Version: 12.1.0.71 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
LG Mouse Scanner (HKLM-x32\...\{97821186-7938-4FC5-9171-8B508D6DE35A}) (Version: 1.2.3 - LG)
Luxor HD (x32 Version: 2.2.0.110 - WildTangent) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
mb WorkSuite 2014 (HKLM-x32\...\{EC7D1F2E-5BD1-4488-9C31-D4F686508BD4}) (Version: 20.14.0310 - mb AEC Software GmbH)
MF Bauphysik (HKLM-x32\...\BauPhysik.exe) (Version:  - )
MF Dach (HKLM-x32\...\MF_DACH.EXE) (Version:  - )
MF DachDesigner - Demo (HKLM-x32\...\DachDesigner.EXE) (Version:  - )
MF Dämmplan (HKLM-x32\...\DAEMMPLAN.EXE) (Version:  - )
MF Drain (HKLM-x32\...\MF_Drain.EXE) (Version:  - )
MF Flachdach (HKLM-x32\...\Flachdach.exe) (Version:  - )
MF PhotoLV (HKLM-x32\...\PhotoLV.EXE) (Version:  - )
MF SeitenDesigner (HKLM-x32\...\SeitenDesigner.Exe) (Version:  - )
MF Startmenu (HKLM-x32\...\MF_Startmenu.exe) (Version:  - )
MF Steildach (HKLM-x32\...\Steildach.EXE) (Version:  - )
MF Windsog-Flachdach (HKLM-x32\...\Windsog.exe) (Version:  - )
MF Windsog-Steildach (HKLM-x32\...\WindsogSteildach.exe) (Version:  - )
MF_Backup (HKLM-x32\...\MF_Backup) (Version:  - )
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Outlook 2013 - de-de (HKLM\...\OutlookRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2-Setup (Deutsch) (HKLM\...\{24BB9353-944E-46BC-BBA8-B8F83E8DBB51}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
My Kingdom for the Princess 3 (x32 Version: 2.2.0.110 - WildTangent) Hidden
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
NXPProximityInstaller (HKLM-x32\...\NXPProximityInstaller) (Version: 6.3.1.0 - NXP Semiconductors)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
OPENLiMiT(R) SignCubes 2.5.0.4 ReaderDeu (HKLM-x32\...\SignCubes) (Version: 2.5.0.4 - OPENLiMiT SignCubes GmbH)
Oracle VM VirtualBox 4.3.6 (HKLM\...\{DC65DFD8-E175-4A85-948A-42965853B2E8}) (Version: 4.3.6 - Oracle Corporation)
PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDF2Word Converter Version 1.1.0 (Build 164) (HKLM-x32\...\PDF2Word Converter_is1) (Version: PDF2Word Converter - Version 1.1.0 (Build 164) - Th. Hodes Software)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayMemories Home (HKLM-x32\...\{1E5C7043-09C5-4974-A69F-A5271FD82BBC}) (Version: 7.0.02.14060 - Sony Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30158 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7010 - Realtek Semiconductor Corp.)
Realtek PC Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.00224 - Realtek Semiconductor Corp.)
Rechtschreibung (HKLM-x32\...\MF_SPELLCHECK) (Version:  - )
Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden
Rudolf Müller Verlag Deutsches Dachdeckerhandwerk - Rege 5.4 (HKLM-x32\...\RUDOLF M_LLER VERLAG DEUTSCHES DACHDECKERHANDWERK _ REGE 5_4) (Version: 5.4 - Rudolf Müller Verlag)
Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1801}) (Version: 12.24.1.51 - APN, LLC) <==== ATTENTION
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shutdown7 2.0 (HKLM-x32\...\Shutdown7 2.0) (Version:  - )
SignCubes comct232.msm Update (x32 Version: 1.0.0 - SignCubes GmbH) Hidden
SignCubes comct323.msm Update (x32 Version: 1.0.0 - SignCubes GmbH) Hidden
Software Updater (HKLM-x32\...\{7ACB9D1D-5B26-4CE4-964A-1EB22461E6F6}) (Version: 4.1.0 - SEIKO EPSON CORPORATION)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.5.1.4 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
VAIO - Active Clip (HKLM-x32\...\{D5DFB462-F7B2-4782-8EDB-0B08F23D12A6}) (Version: 1.2.0.04010 - Sony Corporation)
VAIO BIOS Data Transfer Utility (x32 Version: 1.0.0.02050 - Sony Corporation) Hidden
VAIO Care (HKLM\...\{EF649526-0134-46A8-8DF3-D7F9309E48DB}) (Version: 8.4.2.12046 - Sony Corporation)
VAIO Care-Hardwarediagnose-Plugin (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.8.0.13250 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.2.12.13060 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.11.0.13250 - Sony Corporation)
VAIO Easy Connect (x32 Version: 8.2.0.14170 - Sony Corporation) Hidden
VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.3.0.04030 - Sony Corporation)
VAIO Gesture Control (x32 Version: 2.3.0.04030 - Sony Corporation) Hidden
VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.2.00.07040 - Sony Corporation)
VAIO Image Optimizer (x32 Version: 3.1.00.14260 - Sony Corporation) Hidden
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.2.0.01240 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)
VAIO WWAN Data Transfer Utility (x32 Version: 1.0.0.04030 - Sony Corporation) Hidden
VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.2.0.03050 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.9.0.11060 - Sony Corporation)
Valentin Meteo Data 1.0.6 (HKLM-x32\...\Valentin Meteo Data_is1) (Version:  - Dr. Valentin EnergieSoftware GmbH)
VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32 - WildTangent) Hidden
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VSCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.11 of 2013-Feb-27 (Build 1057) (Setup) - WIBU-SYSTEMS AG)
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.8000 - Broadcom Corporation)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - Broadcom (bcmfn2) System  (02/07/2014 5.93.99.204) (HKLM\...\ECCDB59C607C326FBDD146453C82C819FE5FD1BB) (Version: 02/07/2014 5.93.99.204 - Broadcom)
Windows-Treiberpaket - Broadcom (BCMSDH43XX) Net  (02/07/2014 5.93.99.204) (HKLM\...\58E3A298447257A7FFA6A0B9666E2D23B0D0D342) (Version: 02/07/2014 5.93.99.204 - Broadcom)
Windows-Treiberpaket - Broadcom (BCMSDH43XX) Net  (10/02/2013 5.93.97.187) (HKLM\...\9E6AE0E36E9514CAF8CEE8FA635CB16CA8BCF77E) (Version: 10/02/2013 5.93.97.187 - Broadcom)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WinZip 18.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden
Zeitwerte für Dach-, Wand- und Abdichtungstechnik (HKLM-x32\...\{D988FBC5-6972-41C4-BBE2-3D1A6302CF48}) (Version: 1.00.0000 - Verlagsgesellschaft Rudolf Müller GmbH & Co. KG)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-721494759-1310166264-1152750241-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

11-02-2015 15:39:49 Microsoft Visual C++ 2005 Redistributable wird installiert
11-02-2015 15:40:18 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0893A43D-2243-4C7D-9110-C9649EBE9CF3} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-02-28] (Sony Corporation)
Task: {0B32F403-636F-4175-AE87-F6D134010609} - System32\Tasks\Microsoft\Windows\WCM\Provisioning\Purge.S-1-5-21-721494759-1310166264-1152750241-1001
Task: {0D1EF920-FA36-4650-BB36-8D454296B8A0} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {1005D6D9-394A-4008-BC53-ADB8AF152B4D} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2013-04-04] (Sony Corporation)
Task: {17D179B7-491F-4B1E-93DA-77AEED8BD5AC} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-04-11] (Sony Corporation)
Task: {30F1956F-02C6-4849-929C-24250FBB7CEA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-10-07] (Microsoft Corporation)
Task: {37191CDD-6A90-4810-8BCE-5323B03337A9} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient
Task: {3A0949B9-8134-4197-B084-A43A868D8676} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {46B2B8AC-F3C3-4EE9-B96D-2FF07516C0B0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {4A42AED7-DE48-421A-A8A0-6B7F4FCD7743} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {58DC7E81-1E99-400C-8F98-9B759B17EF3B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {5ADE0A26-168A-4571-87A1-F85281D66879} - System32\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE [2013-02-27] (SEIKO EPSON CORPORATION)
Task: {5CC50463-4F0C-4B29-BB69-A42D4E7E38DE} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-03-15] (Sony Corporation)
Task: {5DD159EF-5686-42F2-B8B6-155B557E9A4E} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-12-03] (Sony Corporation)
Task: {6284B4B1-1BC9-473B-ADC2-1585DE36BF50} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)
Task: {6DD1015E-523A-409C-9025-D9BD7C28C109} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {6F2907CC-3F5A-4A88-8B04-215C78797276} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {728E868C-E551-4EAF-AB88-D9E0B2FEF54B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-02-13] (Microsoft Corporation)
Task: {735DBE2B-6957-4419-BDBA-8A0EB7992E48} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-10-07] (Microsoft Corporation)
Task: {73C88150-B36F-44E8-8EBD-4F5302EFCD64} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIO Capture\VAIO Clip => C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe [2013-12-09] (Sony Corporation)
Task: {7E839DD0-B1FA-4DB0-A6C3-1121EF73D98E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {7F4EE2F4-098D-483A-8E73-C17E7CEBAD49} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-06] (Google Inc.)
Task: {8DE3B549-D597-42F5-8509-8466BDAA1282} - System32\Tasks\Sony Corporation\VAIO Hardware Diagnostics\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2013-01-25] (Sony Corporation)
Task: {8E39A112-DDC2-4D25-B525-AEC780470B55} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {97C5A460-06A5-4B9E-92AD-8760D9FFFE8D} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {A2B57BA8-4A25-4BA4-9E44-DD8FB3C79FDC} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {A42535EA-7958-470F-907B-F855F5516331} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {A5F6CEED-A7DA-4476-A42A-1644E47D97C2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A7F4CCA3-CF33-4C42-9A2A-5B3096A01DE7} - System32\Tasks\Digital Sites => C:\Users\MEDIAM~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {B37451B0-1C43-4262-8EAC-38B8CE7BA660} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2013-01-24] (Sony Corporation)
Task: {B535165E-F69D-4CAD-8692-AF2BAFE34F3E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {B8EAD17C-792F-4187-B0E4-B2A16848FDC4} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {C07A6D55-99D2-4F47-ADA6-CF1A71F589FB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {C0EFB6B4-A63E-4207-B200-84D5D7E97AAB} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {C23907C8-63BC-45CA-9E0E-8DFBD1A59F7B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.)
Task: {C3E84784-0E1B-4996-BE0A-8D0487CE4921} - System32\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE [2013-02-27] (SEIKO EPSON CORPORATION)
Task: {C545C0D3-36D7-44D4-A324-E56FD478A8A5} - System32\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE [2013-02-27] (SEIKO EPSON CORPORATION)
Task: {D2FAF863-12A1-4F4F-8400-8F2BA5A3D09A} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)
Task: {D65B85AE-38E0-49BE-85B9-7484574BF569} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {DADB750A-BE0D-49E8-A9C1-FB28924EB2AF} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-04-11] (Sony Corporation)
Task: {DDB2DCEE-E9FC-46BE-B06A-CA988ED0C961} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {DF8AE1BB-019F-42B7-B012-5A7B9CF2BD4F} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {EEBCDBD4-7258-46C9-8862-D419B6C40BD9} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {F3F638D4-C2E8-4D68-B1F0-356372DC836D} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-03-15] (Sony Corporation)
Task: {FAD820E2-2110-4F56-BAFC-97C297E138A9} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {FC286392-7EA1-423A-8A42-D4BD8473D60A} - System32\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE [2013-02-27] (SEIKO EPSON CORPORATION)
Task: C:\WINDOWS\Tasks\Digital Sites.job => C:\Users\MEDIAM~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLQE.EXE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-16 20:11 - 2013-09-16 20:11 - 00049368 ____C () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2014-07-08 15:46 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-11-19 10:21 - 2013-11-19 10:21 - 00062464 ____C () C:\Program Files\Sony\VAIO Care\listener.exe
2013-11-01 08:28 - 2013-11-01 08:28 - 00094000 ____C () C:\WINDOWS\SYSTEM32\FAIEExtension.DLL
2013-07-27 12:07 - 2013-05-07 09:25 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-02-06 21:28 - 2015-02-04 10:02 - 01117512 ____C () C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-06 21:28 - 2015-02-04 10:02 - 00211272 ____C () C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\40.0.2214.111\libegl.dll
2014-12-16 23:37 - 2014-12-16 23:37 - 01800192 _____ () C:\Program Files (x86)\GoPro\Tools\Importer\GPSDKAnalyticsNet.dll
2014-04-26 02:59 - 2009-07-31 14:00 - 00016384 _____ () C:\Program Files (x86)\OPENLiMiT\deu0ccid.dll
2015-02-06 21:28 - 2015-02-04 10:02 - 14965064 ____C () C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll
2015-02-06 21:28 - 2015-02-04 10:02 - 09170760 ____C () C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\40.0.2214.111\pdf.dll
2014-11-15 20:05 - 2014-11-15 20:05 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-12-26 14:34 - 2014-11-18 15:26 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:054203E4
AlternateDataStreams: C:\Users\Media Markt\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Sony\VAIO Long Battery Life Wallpaper for IPS 1920x1080.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "ATLauncher"
HKLM\...\StartupApproved\Run32: => "FATrayAlert"
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"

==================== Accounts: =============================

Administrator (S-1-5-21-721494759-1310166264-1152750241-500 - Administrator - Disabled)
ASPNET (S-1-5-21-721494759-1310166264-1152750241-1006 - Limited - Enabled)
Gast (S-1-5-21-721494759-1310166264-1152750241-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-721494759-1310166264-1152750241-1005 - Limited - Enabled)
Media Markt (S-1-5-21-721494759-1310166264-1152750241-1001 - Administrator - Enabled) => C:\Users\Media Markt

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/14/2015 02:18:56 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: ASP.NET_1.1.43228

Error: (02/14/2015 02:18:31 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Error: (02/14/2015 02:13:15 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Error: (02/14/2015 01:13:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.4.2.12030, Zeitstempel: 0x5476d099
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ff9bda8b421
ID des fehlerhaften Prozesses: 0x1af0
Startzeit der fehlerhaften Anwendung: 0xVCAgent.exe0
Pfad der fehlerhaften Anwendung: VCAgent.exe1
Pfad des fehlerhaften Moduls: VCAgent.exe2
Berichtskennung: VCAgent.exe3
Vollständiger Name des fehlerhaften Pakets: VCAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: VCAgent.exe5

Error: (02/14/2015 01:13:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: VCAgent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei System.Windows.Application.Run()
   bei VCAgent.App.Main()

Error: (02/13/2015 08:05:10 PM) (Source: MsiInstaller) (EventID: 10005) (User: VAIO)
Description: Produkt: Search App by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Google Chrome

Error: (02/13/2015 08:05:09 PM) (Source: MsiInstaller) (EventID: 10005) (User: VAIO)
Description: Produkt: Search App by Ask -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Google Chrome

Error: (02/13/2015 01:59:18 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Error: (02/13/2015 01:00:11 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: ASP.NET_1.1.43228

Error: (02/12/2015 04:45:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.4.2.12030, Zeitstempel: 0x5476d099
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ff86affb291
ID des fehlerhaften Prozesses: 0x15cc
Startzeit der fehlerhaften Anwendung: 0xVCAgent.exe0
Pfad der fehlerhaften Anwendung: VCAgent.exe1
Pfad des fehlerhaften Moduls: VCAgent.exe2
Berichtskennung: VCAgent.exe3
Vollständiger Name des fehlerhaften Pakets: VCAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: VCAgent.exe5


System errors:
=============
Error: (02/14/2015 01:13:03 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (02/13/2015 11:43:15 AM) (Source: BthMini) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/13/2015 11:43:15 AM) (Source: BtwSerialBus) (EventID: 1035) (User: )
Description: Failed initializing BT device, HCI reset command complete not read.

Error: (02/13/2015 11:43:15 AM) (Source: BtwSerialBus) (EventID: 1064) (User: )
Description: Failed initializing BT device, HCI_VS_WRITE_BD_ADDR failed.

Error: (02/13/2015 11:43:14 AM) (Source: BtwSerialBus) (EventID: 1061) (User: )
Description: Failed initializing BT device, HCI_READ_BD_ADDR failed.

Error: (02/13/2015 11:43:13 AM) (Source: BtwSerialBus) (EventID: 1063) (User: )
Description: Failed initializing BT device, HCI_READ_BD_ADDR not read.

Error: (02/13/2015 11:43:12 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT-AUTORITÄT)
Description: Für den Miniport "HUAWEI Mobile Broadband Module, {ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}" ist das Ereignis "71" aufgetreten.

Error: (02/12/2015 04:45:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (02/12/2015 03:37:55 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.

Error: (02/11/2015 05:40:23 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: NT-AUTORITÄT)
Description: Für den Miniport "HUAWEI Mobile Broadband Module, {ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}" ist das Ereignis "71" aufgetreten.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-09-14 23:12:04.244
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume5\Windows\SysWOW64\comdlg32.dll that did not meet the Windows signing level requirements.

  Date: 2014-09-14 23:09:57.093
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume5\Windows\SysWOW64\comdlg32.dll that did not meet the Windows signing level requirements.

  Date: 2014-09-14 23:08:26.198
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume5\Windows\SysWOW64\comdlg32.dll that did not meet the Windows signing level requirements.

  Date: 2014-09-14 23:07:19.213
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume5\Windows\SysWOW64\comdlg32.dll that did not meet the Windows signing level requirements.

  Date: 2014-09-14 23:06:42.791
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume5\Windows\SysWOW64\comdlg32.dll that did not meet the Windows signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Percentage of memory in use: 54%
Total physical RAM: 3991.8 MB
Available physical RAM: 1829.05 MB
Total Pagefile: 4951.8 MB
Available Pagefile: 2046.17 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:102.55 GB) (Free:23.24 GB) NTFS
Drive g: () (Removable) (Total:59.45 GB) (Free:9.43 GB) exFAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 3832A7BA)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 59.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
--- --- ---
Alt 15.02.2015, 08:27   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Search App by Ask


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.02.2015, 13:56   #9
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

mbam nach ausführung von malewarebyts antimaleware


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 15.02.2015
Scan Time: 12:57:32
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.15.01
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Media Markt

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 378395
Time Elapsed: 10 min, 36 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.FindPositive.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, 3036, Delete-on-Reboot, [f2cbe33b2b5fc373081c966c61a20000]

Modules: 0
(No malicious items detected)

Registry Keys: 27
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{30c85a3d-1d96-4589-b63f-91fb7ef45a41}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{63c63464-1423-4fdb-ba5d-6f75f491c63e}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{50F60937-910A-4C05-8E36-FE4E299191CF}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{50F60937-910A-4C05-8E36-FE4E299191CF}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{63c63464-1423-4fdb-ba5d-6f75f491c63e}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{30C85A3D-1D96-4589-B63F-91FB7EF45A41}, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.FindPositive.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, Quarantined, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc.1, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc.1, Quarantined, [f0cd41dd1e6cd1651e821a26cf348d73],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Delete-on-Reboot, [1aa326f8f79384b2eb309ba924df56aa],
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Quarantined, [1aa326f8f79384b2eb309ba924df56aa],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Delete-on-Reboot, [5964f42acfbbfa3cf068fe09de25659b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Quarantined, [5964f42acfbbfa3cf068fe09de25659b],
PUP.Optional.PositiveFinds.A, HKLM\SOFTWARE\WOW6432NODE\PositiveFinds, Quarantined, [5e5f8b93c6c4f541686ea6e79c67cf31],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, Quarantined, [56678896a5e59e98ceaf00b35ea531cf],
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DSiteProducts, Delete-on-Reboot, [54690e1098f268ce47463fd75fa614ec],
PUP.Optional.AlexaTB.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DISTROMATIC\Toolbars, Delete-on-Reboot, [cdf0be607911d95decac64907391e41c],
PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, Delete-on-Reboot, [dae3e43aafdb5ed8f40952528281ef11],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Delete-on-Reboot, [94297aa4ccbe0630ed4efade2bd8eb15],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Delete-on-Reboot, [3b8208164149ec4a11156d81f60e35cb],
PUP.Optional.Linkury.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR, Delete-on-Reboot, [f6c70717e9a19d9964ddaa01fd0604fc],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, Delete-on-Reboot, [a21b021cd3b7ea4c0d6f8c27966d41bf],

Registry Values: 4
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [15a888967b0f9e9873b95157fc07768a]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Quarantined, [19a438e67a1056e0e04c5454e81b7888]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0X2O1C0R2R1R, Delete-on-Reboot, [3b8208164149ec4a11156d81f60e35cb]
PUP.Optional.Linkury.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR|publisher, YahooOC, Delete-on-Reboot, [f6c70717e9a19d9964ddaa01fd0604fc]

Registry Data: 9
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=),Replaced,[17a6130b93f740f69b3d10af808550b0]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, hxxp://start.mysearchdial.com/?f=2&a=dsites0103&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0CyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=270588048&i r=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=2&a=dsites0103&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0CyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=270588048&i r=),Replaced,[7944bd612e5c90a623647e384eb71ae6]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=),Replaced,[ecd1e737dbaf38fec315437c9273ca36]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000),Delete-on-Reboot,[3f7e77a7e9a1c96dc2c9e4d2fa0b1ce4]
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=ir_14_12_ch&cd=2XzuyEtN2Y1L1QzuzzyEzz0C0ByCyD0AyEyDyEyEyD0CyCtCtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L 1Qzu2StDtBzzyEyDyBtCyDtGyD0CyDtCtGtAyEtD0FtGzy0AtBzytGtC0F0D0D0B0F0C0B0AtCtB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByB0E0DyEzz0EtCtGtCzzzyyCtGyEtC0EtDtGyCzy0B0C tGyCyDyDyB0AyDyEyBtAyEyCyB2Q&cr=1968803628&ir=),Delete-on-Reboot,[05b846d8a4e663d37b5c67587a8bce32]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000),Delete-on-Reboot,[38853ae43951b4823b4fcde9cc3952ae]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000),Delete-on-Reboot,[9b22f42afd8dae88eca164525aabd22e]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000),Delete-on-Reboot,[6c516eb01674fe38a8e6981ee124a25e]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-721494759-1310166264-1152750241-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000, Good: (www.google.com), Bad: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=2789b382-2d1f-881d-cc35-6c84165db550&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=13/01/2014&type=hp1000),Delete-on-Reboot,[3e7f7ba314761c1abacf23932adbe21e]

Folders: 6
PUP.Optional.OpenCandy, C:\Users\Media Markt\AppData\Roaming\OpenCandy, Quarantined, [0db017077317d1654b6568ec986bce32],
PUP.Optional.OpenCandy, C:\Users\Media Markt\AppData\Roaming\OpenCandy\409162D7BE9043FD9C75D395258EE9C3, Quarantined, [0db017077317d1654b6568ec986bce32],
PUP.Optional.OpenCandy, C:\Users\Media Markt\AppData\Roaming\OpenCandy\41BD4340DAA140BAA5C0102419E608C3, Quarantined, [0db017077317d1654b6568ec986bce32],
PUP.Optional.SystemSpeedup, C:\Users\Media Markt\AppData\Roaming\systweak\ssd, Quarantined, [4e6f1d01523875c162228fdda45f946c],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.PositiveFinds.A, C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602, Quarantined, [2d90d04e7a10989e034f92fa12f149b7],

Files: 13
PUP.Optional.FindPositive.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, Delete-on-Reboot, [f2cbe33b2b5fc373081c966c61a20000],
PUP.Optional.Linkury.A, C:\Users\Media Markt\AppData\Roaming\OpenCandy\409162D7BE9043FD9C75D395258EE9C3\Installer.exe, Quarantined, [e8d59e80e4a648ee7d8f670141c4768a],
PUP.Adware.Agent, C:\Users\Media Markt\AppData\Local\Temp\PositiveFinds\Setup.exe, Quarantined, [12ab57c79eecb086a2285aac31cf837d],
PUP.Optional.DigitalSites.A, C:\Windows\Tasks\Digital Sites.job, Quarantined, [902d66b88cfe4aeca0eea5712bda13ed],
PUP.Optional.DigitalSites.A, C:\Windows\System32\Tasks\Digital Sites, Quarantined, [209df02ec9c15bdbbfd042d4ce37a45c],
PUP.Optional.OpenCandy, C:\Users\Media Markt\AppData\Roaming\OpenCandy\41BD4340DAA140BAA5C0102419E608C3\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe, Quarantined, [0db017077317d1654b6568ec986bce32],
PUP.Optional.SystemSpeedup, C:\Users\Media Markt\AppData\Roaming\systweak\ssd\SSDPTstub.exe, Quarantined, [4e6f1d01523875c162228fdda45f946c],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc\config.dat, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc\info.dat, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc\prod.dat, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc\STTL.DAT, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.Updater.A, C:\Users\Media Markt\AppData\Roaming\DigitalSites\UpdateProc\TTL.DAT, Quarantined, [77469c82e8a2b3839e196f01d82b0000],
PUP.Optional.PositiveFinds.A, C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\temp, Quarantined, [2d90d04e7a10989e034f92fa12f149b7],

Physical Sectors: 0
(No malicious items detected)


(end)

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v4.110 - Bericht erstellt 15/02/2015 um 13:19:21
# Aktualisiert 05/02/2015 von Xplode
# Datenbank : 2015-02-14.2 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : Media Markt - VAIO
# Gestarted von : C:\Users\Media Markt\Downloads\AdwCleaner_4.110.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Users\MEDIAM~1\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Media Markt\AppData\Local\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Media Markt\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Media Markt\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Media Markt\AppData\Roaming\RHEng
Datei Gelöscht : C:\WINDOWS\Reimage.ini
Datei Gelöscht : C:\Users\MEDIAM~1\AppData\Local\Temp\uninstaller.exe
Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe
Datei Gelöscht : C:\Users\Media Markt\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
Datei Gelöscht : C:\Users\Media Markt\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster.lnk
Datei Gelöscht : C:\Users\Media Markt\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Geplante Tasks ] *****

Task Gelöscht : Digital Sites

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\feocblgcojafilfbgoineopkngchgaei
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\feocblgcojafilfbgoineopkngchgaei
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F36C143C-4C6D-45AE-9C94-9D5C15BAB3D8}
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Reimage
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Reimage
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [5356 Bytes] - [15/02/2015 13:16:34]
AdwCleaner[S0].txt - [4961 Bytes] - [15/02/2015 13:19:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5020  Bytes] ##########
--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 x64
Ran by Media Markt on 15.02.2015 at 13:26:58,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Users\Media Markt\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Media Markt\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal"
Successfully deleted: [File] C:\WINDOWS\prefetch\ASKPRO.EXE-3E41FB8A.pf



~~~ Folders

Successfully deleted: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.02.2015 at 13:29:38,93
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Media Markt (administrator) on VAIO on 15-02-2015 13:47:55
Running from C:\Users\Media Markt\Downloads\FRST-OlderVersion
Loaded Profiles: Media Markt (Available profiles: Media Markt)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GoPro) C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqTray.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMx.exe
(Freecom) C:\Windows\Temp\Password.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqCFGo.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1322712 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-05-30] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [534232 2013-09-16] (Broadcom Corporation.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATLauncher] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [ATUninstallIcon] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createuninstallentry:1
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95536 2013-11-01] (Sensible Vision )
HKLM-x32\...\Run: [SHIWebOnDiskManager] => C:\Program Files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe [245760 2012-08-08] (SHI Elektronische Medien GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SCLicense] => 欀
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [Google Update] => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-03] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [GoogleChromeAutoLaunch_BB5A9D4CE38EA510829CF43B1FF0D9C5] => C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {6e7b5a2b-7dff-11e3-bec2-82581ea6ab58} - "D:\Password.exe" 
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {a2fbda59-a1dd-11e3-bedb-240a6426a8fe} - "F:\setup.exe" 
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OpenLimit AutoStart.lnk
ShortcutTarget: OpenLimit AutoStart.lnk -> C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe (OPENLiMiT SignCubes GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password.lnk
ShortcutTarget: Password.lnk -> C:\Windows\Temp\Password.exe (Freecom)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: [SiQIconOverlay1] -> {4A6220DC-06E8-41d1-9553-AE7A1A2B8928} => C:\Program Files (x86)\OPENLiMiT\siqSHXn.dll (OPENLiMiT SignCubes GmbH)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}: [NameServer] 139.7.30.126,139.7.30.125

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2014-01-18]
FF HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-23]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.ch/ig?hl=de&source=iglk
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-13]
CHR Extension: (YouTube) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-03]
CHR Extension: (Google-Suche) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-03]
CHR Extension: (Donna Karan) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijgnliiiplghalknhobbcngpcngaoji [2015-02-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-17]
CHR Extension: (Google Wallet) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-03]
CHR Extension: (Google Mail) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-03]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-26] (Broadcom Corporation.)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] () [File not signed]
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-07] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-20] (Realtek Semiconductor)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-15] (Avira Operations GmbH & Co. KG)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [367832 2014-03-14] (Broadcom Corp)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [31744 2013-08-22] (Microsoft Corporation)
R3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-10] (Broadcom Corporation.)
S3 facap; C:\Windows\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24056 2013-03-25] (Intel Corporation)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99832 2013-03-25] (Intel Corporation)
S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [84472 2013-03-25] (Intel Corporation)
R3 iaLPSS_UART; C:\Windows\System32\drivers\iaLPSS_UART.sys [142840 2013-03-25] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-10-05] (Intel Corporation)
R3 IntelSensorSolutionAcpi; C:\Windows\System32\drivers\IntelSensorSolutionAcpi.sys [23288 2014-03-30] (Intel® Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99800 2013-05-07] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242392 2013-07-01] (Realtek Semiconductor Corp.)
R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2014-12-27] ()
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2014-03-30] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [41200 2013-05-30] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 13:30 - 2015-02-15 13:30 - 00005140 ____C () C:\Users\Media Markt\Desktop\AdwCleaner[S0].txt
2015-02-15 13:29 - 2015-02-15 13:30 - 00001075 ____C () C:\Users\Media Markt\Desktop\JRT.txt
2015-02-15 13:25 - 2015-02-15 13:25 - 01388274 ____C (Thisisu) C:\Users\Media Markt\Downloads\JRT.exe
2015-02-15 13:16 - 2015-02-15 13:19 - 00000000 ___DC () C:\AdwCleaner
2015-02-15 13:15 - 2015-02-15 13:16 - 02112512 ____C () C:\Users\Media Markt\Downloads\AdwCleaner_4.110.exe
2015-02-15 13:10 - 2015-02-15 13:10 - 00015843 ____C () C:\Users\Media Markt\Desktop\mbam.txt
2015-02-15 12:55 - 2015-02-15 13:21 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-15 12:54 - 2015-02-15 12:54 - 00001114 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-15 12:54 - 2015-02-15 12:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-15 12:54 - 2015-02-15 12:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-15 12:54 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-15 12:54 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-02-15 12:54 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-02-15 12:50 - 2015-02-15 12:53 - 20447072 ____C (Malwarebytes Corporation ) C:\Users\Media Markt\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-15 12:44 - 2015-02-15 12:44 - 00001280 ____C () C:\Users\Media Markt\Desktop\Revo Uninstaller.lnk
2015-02-15 12:43 - 2015-02-15 12:43 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Media Markt\Downloads\revosetup95.exe
2015-02-15 12:43 - 2015-02-15 12:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-02-14 14:34 - 2015-02-15 13:47 - 00000000 ___DC () C:\Users\Media Markt\Downloads\FRST-OlderVersion
2015-02-14 13:59 - 2015-02-15 13:20 - 00006702 _____ () C:\WINDOWS\PFRO.log
2015-02-13 20:07 - 2015-02-14 14:36 - 00049859 ____C () C:\Users\Media Markt\Downloads\Addition.txt
2015-02-13 20:06 - 2015-02-14 14:36 - 00061622 ____C () C:\Users\Media Markt\Downloads\FRST.txt
2015-02-13 20:04 - 2015-02-15 13:47 - 00000000 ___DC () C:\FRST
2015-02-13 20:04 - 2015-02-14 14:34 - 02134528 ____C (Farbar) C:\Users\Media Markt\Downloads\FRST64.exe
2015-02-13 19:38 - 2015-02-13 19:38 - 00775968 ____C (Reimage®) C:\Users\Media Markt\Downloads\ReimageRepair.exe
2015-02-13 19:22 - 2015-02-13 19:22 - 00001580 ____C () C:\Users\Media Markt\Desktop\Fixlist.txt
2015-02-12 16:45 - 2015-02-15 13:20 - 00000308 _____ () C:\WINDOWS\setupact.log
2015-02-12 16:45 - 2015-02-12 16:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-12 15:41 - 2015-02-12 15:41 - 00002784 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-02-12 15:41 - 2015-02-12 15:41 - 00000834 ____C () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 15:41 - 2015-02-12 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 15:39 - 2015-02-12 15:40 - 04196968 ____C (Piriform Ltd) C:\Users\Media Markt\Downloads\ccsetup502_slim.exe
2015-02-12 10:27 - 2015-01-23 05:41 - 06041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-12 10:27 - 2015-01-23 04:17 - 04300800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 19:05 - 2015-02-11 19:13 - 648437419 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID Full HD.mp4
2015-02-11 18:58 - 2015-02-11 19:00 - 93298507 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID for Mobile.mp4
2015-02-11 18:48 - 2015-02-11 18:53 - 327045434 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID.mp4
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Skype
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\ProgramData\Skype
2015-02-11 18:35 - 2015-02-11 18:35 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Skype
2015-02-11 18:28 - 2015-02-11 18:28 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\TuneUp Software
2015-02-11 18:21 - 2015-02-11 18:21 - 00001257 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-11 18:14 - 2015-02-11 18:15 - 03533008 ____C (DVDVideoSoft Ltd. ) C:\Users\Media Markt\Downloads\FreeYouTubeToMP3Converter.exe
2015-02-11 17:51 - 2015-02-04 00:38 - 00227328 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00761856 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00414208 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 01098752 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00894464 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00609280 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 17:51 - 2015-01-19 19:42 - 01487976 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 17:51 - 2014-12-19 09:57 - 00788680 ____C (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 17:51 - 2014-12-19 09:25 - 00602776 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 17:51 - 2014-12-09 00:12 - 00391526 ____C () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 16:27 - 2015-02-11 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-11 16:23 - 2015-02-12 15:30 - 00210464 ____C () C:\Users\Media Markt\Desktop\ein tag am wurmberg.gcs
2015-02-11 16:20 - 2015-02-11 16:26 - 42096984 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\QuickTimeInstaller.exe
2015-02-11 15:52 - 2015-02-11 17:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-11 15:42 - 2015-02-11 16:23 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\GoPro
2015-02-11 15:42 - 2015-02-11 15:43 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00001124 ____C () C:\Users\Media Markt\Desktop\GoPro Studio.lnk
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\CineForm
2015-02-11 15:41 - 2015-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-11 15:41 - 2015-02-11 15:58 - 00000000 ____D () C:\Users\Public\CineForm
2015-02-11 15:41 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\GoPro
2015-02-11 15:15 - 2015-02-11 15:39 - 163904608 ____C () C:\Users\Media Markt\Downloads\GoProStudioPC-2.5.4.404.exe
2015-02-11 14:56 - 2015-01-15 23:43 - 00563504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 14:56 - 2015-01-15 23:43 - 00177984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 14:56 - 2015-01-14 05:22 - 00445440 ____C (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 14:56 - 2015-01-14 04:53 - 00324096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 14:56 - 2015-01-13 23:11 - 01762840 ____C (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-13 23:04 - 01489072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-10 10:10 - 07472960 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 14:56 - 2015-01-10 10:10 - 01733440 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 14:56 - 2015-01-10 09:28 - 01498360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 14:56 - 2014-12-09 04:45 - 00393728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 14:56 - 2014-12-09 02:56 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 14:56 - 2014-10-29 03:51 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:50 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 14:56 - 2014-10-29 02:57 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:31 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 14:56 - 2014-10-29 02:14 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 ____C (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-12 03:48 - 00584192 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:47 - 00088064 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 03:34 - 00816128 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 14:50 - 2015-01-12 03:21 - 00490496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 03:08 - 00503296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:07 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 14:50 - 2015-01-12 03:05 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 02:58 - 01032704 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:55 - 00664064 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 14:50 - 2015-01-12 02:51 - 00262144 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00801280 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00718848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 14:50 - 2015-01-12 02:48 - 00374272 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:46 - 02125824 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:45 - 00418304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 02:34 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 14:50 - 2015-01-12 02:30 - 00880128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02865152 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02358272 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 14:50 - 2015-01-12 02:25 - 00230400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 02052608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:23 - 00688640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 00327168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:14 - 01548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 14:50 - 2015-01-12 02:02 - 00800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 14:50 - 2015-01-12 02:00 - 01888256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 14:50 - 2015-01-12 01:56 - 01307136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 14:50 - 2015-01-12 01:55 - 00710144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 14:43 - 2015-01-10 09:22 - 04175872 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-09 22:51 - 2015-02-09 22:51 - 00000000 ____D () C:\WINDOWS\de
2015-02-09 22:50 - 2015-02-09 22:50 - 00001390 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-09 22:50 - 2015-02-09 22:50 - 00001321 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-09 22:47 - 2015-02-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-09 22:47 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-02-09 22:45 - 2015-02-09 22:55 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Windows Live
2015-02-09 22:44 - 2015-02-09 22:44 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web (1).exe
2015-02-09 22:43 - 2015-02-09 22:43 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web.exe
2015-02-09 14:30 - 2015-02-09 14:30 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Outlook-Dateien
2015-02-08 19:43 - 2015-02-08 20:14 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Skitag Wurmberg 08.02.2015
2015-02-04 20:34 - 2015-01-19 16:00 - 74686645 ____C () C:\Users\Media Markt\Desktop\Radikalführen_ep9_A15EO1LOWQHQLI.aax
2015-02-03 23:20 - 2015-02-04 20:33 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Audible
2015-02-03 15:10 - 2015-02-03 15:10 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Gopro alt Zermatt Thun
2015-01-31 19:36 - 2015-01-31 19:37 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Testordner Scheisstunes
2015-01-31 18:13 - 2015-01-31 18:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00001765 ____C () C:\Users\Public\Desktop\iTunes.lnk
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-31 18:13 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\Program Files\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\iPod
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-31 17:46 - 2015-01-31 18:07 - 152439600 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\itunes6464setup.exe
2015-01-31 01:18 - 2015-01-31 01:18 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 16:53 - 2015-01-28 16:55 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam
2015-01-23 20:34 - 2015-01-23 20:34 - 00006394 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799547623-2300.mp4
2015-01-23 20:34 - 2015-01-23 20:34 - 00006019 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799450433-2016.mp4
2015-01-20 22:24 - 2015-01-20 22:24 - 00000026 _____ () C:\WINDOWS\SysWOW64\BatTestUACin_SysRt1436.batemp
2015-01-20 22:23 - 2015-01-20 22:23 - 00000000 ____D () C:\WINDOWS\AB22EC1B65684CE98B97C6FBC47F9BC5.TMP
2015-01-19 15:49 - 2015-01-19 15:49 - 00000294 ____C () C:\Users\Media Markt\Downloads\BK_CAMP_000186DE_LC_64_44100_ster_A15EO1LOWQHQLI.adh

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 13:41 - 2014-03-31 20:41 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-15 13:41 - 2014-03-31 20:41 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-15 13:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-02-15 13:32 - 2013-07-27 13:46 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-721494759-1310166264-1152750241-1001
2015-02-15 13:31 - 2014-01-13 21:17 - 01833538 ____C () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-02-15 13:31 - 2013-11-14 08:11 - 00779226 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-15 13:31 - 2013-11-14 08:11 - 00164856 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-15 13:26 - 2014-03-22 15:36 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\ClassicShell
2015-02-15 13:26 - 2013-11-14 08:27 - 01804092 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-15 13:26 - 2013-11-03 14:56 - 00001154 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job
2015-02-15 13:22 - 2014-01-18 02:43 - 02032724 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-15 13:21 - 2014-02-06 23:19 - 00001124 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-15 13:21 - 2014-01-18 07:47 - 00000000 ___DO () C:\Users\Media Markt\SkyDrive
2015-02-15 13:20 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-15 13:20 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-15 13:18 - 2014-02-06 23:19 - 00001128 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-15 13:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\L2Schemas
2015-02-15 13:09 - 2014-12-03 11:09 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-15 13:09 - 2014-12-03 11:09 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-15 13:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-15 12:35 - 2014-02-07 19:51 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{962BA8C8-294A-413A-A87B-366529D5488D}
2015-02-14 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-13 13:07 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-13 13:07 - 2013-08-17 17:05 - 00000000 ___DC () C:\WINDOWS\system32\MRT
2015-02-13 13:01 - 2013-08-17 17:05 - 116773704 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-13 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-13 12:59 - 2014-12-12 13:03 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-13 12:59 - 2014-07-21 05:14 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-12 15:44 - 2014-01-15 17:48 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DAEMON Tools Lite
2015-02-12 15:43 - 2014-02-23 10:20 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 15:43 - 2014-01-18 02:36 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-12 10:02 - 2013-11-03 14:56 - 00001102 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job
2015-02-11 22:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-11 19:01 - 2014-03-19 12:41 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\vlc
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 _SHDC () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 ___DC () C:\ProgramData\TuneUp Software
2015-02-11 18:22 - 2014-01-13 12:10 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DVDVideoSoft
2015-02-11 18:21 - 2014-03-23 11:05 - 00001548 ____C () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft
2015-02-11 17:44 - 2013-08-22 15:44 - 00400024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 17:41 - 2014-01-14 18:14 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2015-02-11 17:41 - 2013-07-27 12:20 - 00000000 ___DC () C:\ProgramData\Package Cache
2015-02-11 15:41 - 2014-03-29 23:21 - 00000000 ____D () C:\Program Files\DIFX
2015-02-10 22:09 - 2014-05-12 22:00 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Philipp
2015-02-09 22:48 - 2014-01-16 17:41 - 00000000 ___DC () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-02-09 20:41 - 2014-12-22 11:57 - 00000000 ____D () C:\Users\Media Markt\Desktop\Youtube mix
2015-02-06 15:13 - 2014-02-06 23:19 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 15:13 - 2014-02-06 23:19 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 09:47 - 2014-02-13 23:30 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Audible
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 08:21 - 2013-11-03 14:56 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA
2015-02-03 08:21 - 2013-11-03 14:56 - 00003732 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core
2015-01-31 19:38 - 2014-02-12 16:38 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\TeamViewer
2015-01-31 01:19 - 2013-07-27 12:42 - 00000000 ___DC () C:\Program Files\Sony
2015-01-31 01:19 - 2013-07-27 12:12 - 00000000 ___DC () C:\Program Files (x86)\Sony
2015-01-21 19:54 - 2013-07-27 12:24 - 00000000 ___DC () C:\Program Files (x86)\WildTangent Games
2015-01-21 01:17 - 2014-08-02 07:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 01:16 - 2014-10-03 16:27 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-21 01:12 - 2014-04-28 11:27 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Arbeit Magdeburg Enrico Stehr
2015-01-20 22:26 - 2014-09-02 08:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Deployment
2015-01-20 22:26 - 2014-01-26 15:54 - 00000000 ____D () C:\ProgramData\Valentin EnergieSoftware
2015-01-20 22:25 - 2013-07-27 12:42 - 00000000 ___DC () C:\ProgramData\Sony Corporation
2015-01-20 22:25 - 2013-07-27 12:04 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 18:48 - 2013-07-27 13:40 - 00000000 ___DC () C:\Users\Media Markt\AppData\Local\Packages

==================== Files in the root of some directories =======

2014-01-13 21:18 - 2014-07-16 13:28 - 0000051 ____C () C:\Users\Media Markt\AppData\Roaming\cdwd.ini
2014-01-13 21:27 - 2014-07-16 13:31 - 0000320 ____C () C:\Users\Media Markt\AppData\Roaming\PrjHistorie.001
2014-01-22 16:42 - 2014-02-11 21:23 - 0000136 _____ () C:\Users\Media Markt\AppData\Roaming\WB.CFG
2014-01-22 16:42 - 2014-01-22 16:42 - 0000005 _____ () C:\Users\Media Markt\AppData\Roaming\WBPU-TTL.DAT
2014-01-13 21:18 - 2014-01-13 21:18 - 0000099 ____C () C:\Users\Media Markt\AppData\Local\fusioncache.dat
2014-01-11 17:41 - 2014-01-12 10:28 - 0007609 ____C () C:\Users\Media Markt\AppData\Local\Resmon.ResmonCfg
2014-01-18 02:38 - 2014-01-18 02:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-29 17:39 - 2014-04-29 17:40 - 0000650 _____ () C:\ProgramData\MF_Installer_Data.inf

Files to move or delete:
====================
C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL


Some content of TEMP:
====================
C:\Users\Media Markt\AppData\Local\Temp\avgnt.exe
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Media Markt\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Media Markt\AppData\Local\Temp\Quarantine.exe
C:\Users\Media Markt\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-14 14:13

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 15.02.2015, 13:57   #10
Liptohoh
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

frst neu



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Media Markt (administrator) on VAIO on 15-02-2015 13:47:55
Running from C:\Users\Media Markt\Downloads\FRST-OlderVersion
Loaded Profiles: Media Markt (Available profiles: Media Markt)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILQE.EXE
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GoPro) C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqTray.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqSEMx.exe
(Freecom) C:\Windows\Temp\Password.exe
(OPENLiMiT SignCubes GmbH) C:\Program Files (x86)\OPENLiMiT\siqCFGo.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [142040 2013-07-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1322712 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-05-30] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [Bluetooth] => C:\Program Files\WIDCOMM\Bluetooth Software\bttray.exe [534232 2013-09-16] (Broadcom Corporation.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-01-27] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATLauncher] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [ATUninstallIcon] => "C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe" /createuninstallentry:1
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95536 2013-11-01] (Sensible Vision )
HKLM-x32\...\Run: [SHIWebOnDiskManager] => C:\Program Files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe [245760 2012-08-08] (SHI Elektronische Medien GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SCLicense] => 欀
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [Google Update] => C:\Users\Media Markt\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-03] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [GoogleChromeAutoLaunch_BB5A9D4CE38EA510829CF43B1FF0D9C5] => C:\Users\Media Markt\AppData\Local\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILQE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {6e7b5a2b-7dff-11e3-bec2-82581ea6ab58} - "D:\Password.exe" 
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\MountPoints2: {a2fbda59-a1dd-11e3-bedb-240a6426a8fe} - "F:\setup.exe" 
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OpenLimit AutoStart.lnk
ShortcutTarget: OpenLimit AutoStart.lnk -> C:\Program Files (x86)\OPENLiMiT\siqSEMr.exe (OPENLiMiT SignCubes GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Password.lnk
ShortcutTarget: Password.lnk -> C:\Windows\Temp\Password.exe (Freecom)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: [SiQIconOverlay1] -> {4A6220DC-06E8-41d1-9553-AE7A1A2B8928} => C:\Program Files (x86)\OPENLiMiT\siqSHXn.dll (OPENLiMiT SignCubes GmbH)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-721494759-1310166264-1152750241-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ADE2B81F-48E5-464E-BDAC-9D883DCB5F99}: [NameServer] 139.7.30.126,139.7.30.125

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Media Markt\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-721494759-1310166264-1152750241-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2014-01-18]
FF HKU\S-1-5-21-721494759-1310166264-1152750241-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-23]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.ch/ig?hl=de&source=iglk
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-13]
CHR Extension: (YouTube) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-03]
CHR Extension: (Google-Suche) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-03]
CHR Extension: (Donna Karan) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijgnliiiplghalknhobbcngpcngaoji [2015-02-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-17]
CHR Extension: (Google Wallet) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-03]
CHR Extension: (Google Mail) - C:\Users\Media Markt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-03]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-04] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-26] (Broadcom Corporation.)
S3 becldr3Service; C:\Program Files (x86)\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [176128 2011-04-19] () [File not signed]
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-03-15] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-07] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-08-20] (Realtek Semiconductor)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-15] (Avira Operations GmbH & Co. KG)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [367832 2014-03-14] (Broadcom Corp)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [31744 2013-08-22] (Microsoft Corporation)
R3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-10] (Broadcom Corporation.)
S3 facap; C:\Windows\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24056 2013-03-25] (Intel Corporation)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99832 2013-03-25] (Intel Corporation)
S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [84472 2013-03-25] (Intel Corporation)
R3 iaLPSS_UART; C:\Windows\System32\drivers\iaLPSS_UART.sys [142840 2013-03-25] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2013-10-05] (Intel Corporation)
R3 IntelSensorSolutionAcpi; C:\Windows\System32\drivers\IntelSensorSolutionAcpi.sys [23288 2014-03-30] (Intel® Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99800 2013-05-07] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8242392 2013-07-01] (Realtek Semiconductor Corp.)
R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2014-12-27] ()
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2014-03-30] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [41200 2013-05-30] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-03-15] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 13:30 - 2015-02-15 13:30 - 00005140 ____C () C:\Users\Media Markt\Desktop\AdwCleaner[S0].txt
2015-02-15 13:29 - 2015-02-15 13:30 - 00001075 ____C () C:\Users\Media Markt\Desktop\JRT.txt
2015-02-15 13:25 - 2015-02-15 13:25 - 01388274 ____C (Thisisu) C:\Users\Media Markt\Downloads\JRT.exe
2015-02-15 13:16 - 2015-02-15 13:19 - 00000000 ___DC () C:\AdwCleaner
2015-02-15 13:15 - 2015-02-15 13:16 - 02112512 ____C () C:\Users\Media Markt\Downloads\AdwCleaner_4.110.exe
2015-02-15 13:10 - 2015-02-15 13:10 - 00015843 ____C () C:\Users\Media Markt\Desktop\mbam.txt
2015-02-15 12:55 - 2015-02-15 13:21 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-15 12:54 - 2015-02-15 12:54 - 00001114 ____C () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-15 12:54 - 2015-02-15 12:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-15 12:54 - 2015-02-15 12:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-02-15 12:54 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-15 12:54 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-02-15 12:54 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-02-15 12:50 - 2015-02-15 12:53 - 20447072 ____C (Malwarebytes Corporation ) C:\Users\Media Markt\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-15 12:44 - 2015-02-15 12:44 - 00001280 ____C () C:\Users\Media Markt\Desktop\Revo Uninstaller.lnk
2015-02-15 12:43 - 2015-02-15 12:43 - 02623656 ____C (VS Revo Group Ltd.) C:\Users\Media Markt\Downloads\revosetup95.exe
2015-02-15 12:43 - 2015-02-15 12:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-02-14 14:34 - 2015-02-15 13:47 - 00000000 ___DC () C:\Users\Media Markt\Downloads\FRST-OlderVersion
2015-02-14 13:59 - 2015-02-15 13:20 - 00006702 _____ () C:\WINDOWS\PFRO.log
2015-02-13 20:07 - 2015-02-14 14:36 - 00049859 ____C () C:\Users\Media Markt\Downloads\Addition.txt
2015-02-13 20:06 - 2015-02-14 14:36 - 00061622 ____C () C:\Users\Media Markt\Downloads\FRST.txt
2015-02-13 20:04 - 2015-02-15 13:47 - 00000000 ___DC () C:\FRST
2015-02-13 20:04 - 2015-02-14 14:34 - 02134528 ____C (Farbar) C:\Users\Media Markt\Downloads\FRST64.exe
2015-02-13 19:38 - 2015-02-13 19:38 - 00775968 ____C (Reimage®) C:\Users\Media Markt\Downloads\ReimageRepair.exe
2015-02-13 19:22 - 2015-02-13 19:22 - 00001580 ____C () C:\Users\Media Markt\Desktop\Fixlist.txt
2015-02-12 16:45 - 2015-02-15 13:20 - 00000308 _____ () C:\WINDOWS\setupact.log
2015-02-12 16:45 - 2015-02-12 16:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-02-12 15:41 - 2015-02-12 15:41 - 00002784 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-02-12 15:41 - 2015-02-12 15:41 - 00000834 ____C () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 15:41 - 2015-02-12 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 15:39 - 2015-02-12 15:40 - 04196968 ____C (Piriform Ltd) C:\Users\Media Markt\Downloads\ccsetup502_slim.exe
2015-02-12 10:27 - 2015-01-23 05:41 - 06041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-12 10:27 - 2015-01-23 04:17 - 04300800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 19:05 - 2015-02-11 19:13 - 648437419 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID Full HD.mp4
2015-02-11 18:58 - 2015-02-11 19:00 - 93298507 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID for Mobile.mp4
2015-02-11 18:48 - 2015-02-11 18:53 - 327045434 ____C () C:\Users\Media Markt\Desktop\Ein Skitag am Wurmberg GOPROVID.mp4
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Skype
2015-02-11 18:35 - 2015-02-11 19:18 - 00000000 ____D () C:\ProgramData\Skype
2015-02-11 18:35 - 2015-02-11 18:35 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Skype
2015-02-11 18:28 - 2015-02-11 18:28 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\TuneUp Software
2015-02-11 18:21 - 2015-02-11 18:21 - 00001257 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-02-11 18:21 - 2015-02-11 18:21 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-02-11 18:14 - 2015-02-11 18:15 - 03533008 ____C (DVDVideoSoft Ltd. ) C:\Users\Media Markt\Downloads\FreeYouTubeToMP3Converter.exe
2015-02-11 17:51 - 2015-02-04 00:38 - 00227328 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00761856 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 17:51 - 2015-02-04 00:08 - 00414208 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 01098752 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00894464 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 17:51 - 2015-02-03 00:11 - 00609280 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 17:51 - 2015-01-19 19:42 - 01487976 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 17:51 - 2014-12-19 09:57 - 00788680 ____C (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 17:51 - 2014-12-19 09:25 - 00602776 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 17:51 - 2014-12-09 00:12 - 00391526 ____C () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 16:27 - 2015-02-11 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-11 16:23 - 2015-02-12 15:30 - 00210464 ____C () C:\Users\Media Markt\Desktop\ein tag am wurmberg.gcs
2015-02-11 16:20 - 2015-02-11 16:26 - 42096984 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\QuickTimeInstaller.exe
2015-02-11 15:52 - 2015-02-11 17:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-11 15:42 - 2015-02-11 16:23 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\GoPro
2015-02-11 15:42 - 2015-02-11 15:43 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00001124 ____C () C:\Users\Media Markt\Desktop\GoPro Studio.lnk
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-02-11 15:42 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\CineForm
2015-02-11 15:41 - 2015-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-11 15:41 - 2015-02-11 15:58 - 00000000 ____D () C:\Users\Public\CineForm
2015-02-11 15:41 - 2015-02-11 15:42 - 00000000 ____D () C:\Program Files (x86)\GoPro
2015-02-11 15:15 - 2015-02-11 15:39 - 163904608 ____C () C:\Users\Media Markt\Downloads\GoProStudioPC-2.5.4.404.exe
2015-02-11 14:56 - 2015-01-15 23:43 - 00563504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 14:56 - 2015-01-15 23:43 - 00177984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 14:56 - 2015-01-14 05:22 - 00445440 ____C (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 14:56 - 2015-01-14 04:53 - 00324096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 14:56 - 2015-01-13 23:11 - 01762840 ____C (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-13 23:04 - 01489072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 14:56 - 2015-01-10 10:10 - 07472960 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 14:56 - 2015-01-10 10:10 - 01733440 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 14:56 - 2015-01-10 09:28 - 01498360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 14:56 - 2014-12-09 04:45 - 00393728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 14:56 - 2014-12-09 02:56 - 00538624 ____C (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 14:56 - 2014-10-29 03:51 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:50 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00736768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 14:56 - 2014-10-29 03:06 - 00154112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 14:56 - 2014-10-29 03:02 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 14:56 - 2014-10-29 02:57 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:31 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 14:56 - 2014-10-29 02:15 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 14:56 - 2014-10-29 02:14 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 14:56 - 2014-10-29 02:13 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 ____C (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-12 03:48 - 00584192 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:47 - 00088064 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 03:34 - 00816128 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 14:50 - 2015-01-12 03:21 - 00490496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 03:08 - 00503296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 14:50 - 2015-01-12 03:07 - 00092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 14:50 - 2015-01-12 03:05 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 14:50 - 2015-01-12 02:58 - 01032704 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:55 - 00664064 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 14:50 - 2015-01-12 02:51 - 00262144 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00801280 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:48 - 00718848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 14:50 - 2015-01-12 02:48 - 00374272 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:46 - 02125824 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:45 - 00418304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 14:50 - 2015-01-12 02:34 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 14:50 - 2015-01-12 02:30 - 00880128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02865152 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 14:50 - 2015-01-12 02:27 - 02358272 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 14:50 - 2015-01-12 02:25 - 00230400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 02052608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 14:50 - 2015-01-12 02:23 - 00688640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 14:50 - 2015-01-12 02:23 - 00327168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 14:50 - 2015-01-12 02:14 - 01548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 14:50 - 2015-01-12 02:02 - 00800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 14:50 - 2015-01-12 02:00 - 01888256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 14:50 - 2015-01-12 01:56 - 01307136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 14:50 - 2015-01-12 01:55 - 00710144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 14:43 - 2015-01-10 09:22 - 04175872 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-09 22:51 - 2015-02-09 22:51 - 00000000 ____D () C:\WINDOWS\de
2015-02-09 22:50 - 2015-02-09 22:50 - 00001390 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-09 22:50 - 2015-02-09 22:50 - 00001321 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-09 22:47 - 2015-02-09 22:48 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-09 22:47 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-02-09 22:47 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-02-09 22:47 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-02-09 22:47 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-02-09 22:45 - 2015-02-09 22:55 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Windows Live
2015-02-09 22:44 - 2015-02-09 22:44 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web (1).exe
2015-02-09 22:43 - 2015-02-09 22:43 - 01245384 ____C (Microsoft Corporation) C:\Users\Media Markt\Downloads\wlsetup-web.exe
2015-02-09 14:30 - 2015-02-09 14:30 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Outlook-Dateien
2015-02-08 19:43 - 2015-02-08 20:14 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Skitag Wurmberg 08.02.2015
2015-02-04 20:34 - 2015-01-19 16:00 - 74686645 ____C () C:\Users\Media Markt\Desktop\Radikalführen_ep9_A15EO1LOWQHQLI.aax
2015-02-03 23:20 - 2015-02-04 20:33 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam\Media Markt\Documents\Audible
2015-02-03 15:10 - 2015-02-03 15:10 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Gopro alt Zermatt Thun
2015-01-31 19:36 - 2015-01-31 19:37 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Testordner Scheisstunes
2015-01-31 18:13 - 2015-01-31 18:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00001765 ____C () C:\Users\Public\Desktop\iTunes.lnk
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple Computer
2015-01-31 18:13 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-31 18:13 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-31 18:12 - 2015-01-31 18:13 - 00000000 ____D () C:\Program Files\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Apple
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\iPod
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-31 18:12 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\ProgramData\Apple
2015-01-31 18:11 - 2015-01-31 18:12 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-31 17:46 - 2015-01-31 18:07 - 152439600 ____C (Apple Inc.) C:\Users\Media Markt\Downloads\itunes6464setup.exe
2015-01-31 01:18 - 2015-01-31 01:18 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 16:53 - 2015-01-28 16:55 - 00000000 ___DC () C:\Users\Media Markt\Desktop\bilder termocam
2015-01-23 20:34 - 2015-01-23 20:34 - 00006394 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799547623-2300.mp4
2015-01-23 20:34 - 2015-01-23 20:34 - 00006019 ____C () C:\Users\Media Markt\Downloads\audioclip-1391799450433-2016.mp4
2015-01-20 22:24 - 2015-01-20 22:24 - 00000026 _____ () C:\WINDOWS\SysWOW64\BatTestUACin_SysRt1436.batemp
2015-01-20 22:23 - 2015-01-20 22:23 - 00000000 ____D () C:\WINDOWS\AB22EC1B65684CE98B97C6FBC47F9BC5.TMP
2015-01-19 15:49 - 2015-01-19 15:49 - 00000294 ____C () C:\Users\Media Markt\Downloads\BK_CAMP_000186DE_LC_64_44100_ster_A15EO1LOWQHQLI.adh

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 13:41 - 2014-03-31 20:41 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-15 13:41 - 2014-03-31 20:41 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {C184E501-5051-4719-A134-E462DD29361D}.job
2015-02-15 13:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-02-15 13:32 - 2013-07-27 13:46 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-721494759-1310166264-1152750241-1001
2015-02-15 13:31 - 2014-01-13 21:17 - 01833538 ____C () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-02-15 13:31 - 2013-11-14 08:11 - 00779226 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-15 13:31 - 2013-11-14 08:11 - 00164856 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-15 13:26 - 2014-03-22 15:36 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\ClassicShell
2015-02-15 13:26 - 2013-11-14 08:27 - 01804092 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-15 13:26 - 2013-11-03 14:56 - 00001154 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA.job
2015-02-15 13:22 - 2014-01-18 02:43 - 02032724 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-15 13:21 - 2014-02-06 23:19 - 00001124 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-15 13:21 - 2014-01-18 07:47 - 00000000 ___DO () C:\Users\Media Markt\SkyDrive
2015-02-15 13:20 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-15 13:20 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-15 13:18 - 2014-02-06 23:19 - 00001128 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-15 13:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\L2Schemas
2015-02-15 13:09 - 2014-12-03 11:09 - 00000929 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Update {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-15 13:09 - 2014-12-03 11:09 - 00000743 ____C () C:\WINDOWS\Tasks\EPSON XP-610 Series Invitation {51566C7F-2A99-484D-B8C6-C16E6827C1B4}.job
2015-02-15 13:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-15 12:35 - 2014-02-07 19:51 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{962BA8C8-294A-413A-A87B-366529D5488D}
2015-02-14 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-13 13:07 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-13 13:07 - 2013-08-17 17:05 - 00000000 ___DC () C:\WINDOWS\system32\MRT
2015-02-13 13:01 - 2013-08-17 17:05 - 116773704 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-13 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-13 12:59 - 2014-12-12 13:03 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-13 12:59 - 2014-07-21 05:14 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-12 15:44 - 2014-01-15 17:48 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DAEMON Tools Lite
2015-02-12 15:43 - 2014-02-23 10:20 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-12 15:43 - 2014-01-18 02:36 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-12 10:02 - 2013-11-03 14:56 - 00001102 ____C () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core.job
2015-02-11 22:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-11 19:01 - 2014-03-19 12:41 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\vlc
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 _SHDC () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-11 18:27 - 2014-01-13 12:17 - 00000000 ___DC () C:\ProgramData\TuneUp Software
2015-02-11 18:22 - 2014-01-13 12:10 - 00000000 ___DC () C:\Users\Media Markt\AppData\Roaming\DVDVideoSoft
2015-02-11 18:21 - 2014-03-23 11:05 - 00001548 ____C () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-02-11 18:21 - 2014-01-13 12:10 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft
2015-02-11 17:44 - 2013-08-22 15:44 - 00400024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 17:41 - 2014-01-14 18:14 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2015-02-11 17:41 - 2013-07-27 12:20 - 00000000 ___DC () C:\ProgramData\Package Cache
2015-02-11 15:41 - 2014-03-29 23:21 - 00000000 ____D () C:\Program Files\DIFX
2015-02-10 22:09 - 2014-05-12 22:00 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Philipp
2015-02-09 22:48 - 2014-01-16 17:41 - 00000000 ___DC () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-02-09 20:41 - 2014-12-22 11:57 - 00000000 ____D () C:\Users\Media Markt\Desktop\Youtube mix
2015-02-06 15:13 - 2014-02-06 23:19 - 00004100 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 15:13 - 2014-02-06 23:19 - 00003864 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 09:47 - 2014-02-13 23:30 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Audible
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 08:21 - 2013-11-03 14:56 - 00004112 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001UA
2015-02-03 08:21 - 2013-11-03 14:56 - 00003732 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-721494759-1310166264-1152750241-1001Core
2015-01-31 19:38 - 2014-02-12 16:38 - 00000000 ____D () C:\Users\Media Markt\AppData\Roaming\TeamViewer
2015-01-31 01:19 - 2013-07-27 12:42 - 00000000 ___DC () C:\Program Files\Sony
2015-01-31 01:19 - 2013-07-27 12:12 - 00000000 ___DC () C:\Program Files (x86)\Sony
2015-01-21 19:54 - 2013-07-27 12:24 - 00000000 ___DC () C:\Program Files (x86)\WildTangent Games
2015-01-21 01:17 - 2014-08-02 07:41 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 01:16 - 2014-10-03 16:27 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2015-01-21 01:16 - 2014-10-03 16:27 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-21 01:16 - 2014-10-03 16:27 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-21 01:12 - 2014-04-28 11:27 - 00000000 ___DC () C:\Users\Media Markt\Desktop\Arbeit Magdeburg Enrico Stehr
2015-01-20 22:26 - 2014-09-02 08:44 - 00000000 ____D () C:\Users\Media Markt\AppData\Local\Deployment
2015-01-20 22:26 - 2014-01-26 15:54 - 00000000 ____D () C:\ProgramData\Valentin EnergieSoftware
2015-01-20 22:25 - 2013-07-27 12:42 - 00000000 ___DC () C:\ProgramData\Sony Corporation
2015-01-20 22:25 - 2013-07-27 12:04 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-01-19 18:48 - 2013-07-27 13:40 - 00000000 ___DC () C:\Users\Media Markt\AppData\Local\Packages

==================== Files in the root of some directories =======

2014-01-13 21:18 - 2014-07-16 13:28 - 0000051 ____C () C:\Users\Media Markt\AppData\Roaming\cdwd.ini
2014-01-13 21:27 - 2014-07-16 13:31 - 0000320 ____C () C:\Users\Media Markt\AppData\Roaming\PrjHistorie.001
2014-01-22 16:42 - 2014-02-11 21:23 - 0000136 _____ () C:\Users\Media Markt\AppData\Roaming\WB.CFG
2014-01-22 16:42 - 2014-01-22 16:42 - 0000005 _____ () C:\Users\Media Markt\AppData\Roaming\WBPU-TTL.DAT
2014-01-13 21:18 - 2014-01-13 21:18 - 0000099 ____C () C:\Users\Media Markt\AppData\Local\fusioncache.dat
2014-01-11 17:41 - 2014-01-12 10:28 - 0007609 ____C () C:\Users\Media Markt\AppData\Local\Resmon.ResmonCfg
2014-01-18 02:38 - 2014-01-18 02:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-29 17:39 - 2014-04-29 17:40 - 0000650 _____ () C:\ProgramData\MF_Installer_Data.inf

Files to move or delete:
====================
C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL


Some content of TEMP:
====================
C:\Users\Media Markt\AppData\Local\Temp\avgnt.exe
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Media Markt\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Media Markt\AppData\Local\Temp\Quarantine.exe
C:\Users\Media Markt\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Media Markt\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.dll
C:\Users\Media Markt\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-14 14:13

==================== End Of Log ============================
--- --- ---
Alt 15.02.2015, 19:24   #11
schrauber
/// the machine
/// TB-Ausbilder
 
Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Standard

Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.
adware, bekannte, chrome, dinge, download, enfernen, finds, freeware, google, google chrome, nervig, positive, positive finds, ratschläge, total


« auch von Positive Finds ad betroffen | Positiv Finds ads »


Ähnliche Themen: Adware "Positive Finds" lässt sich in google Chrome nicht enfernen.


  1. Positive Finds Ads lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 30.03.2015 (5)
  2. Positive Finds lässt sich auch bei mir nicht deinstallieren
    Log-Analyse und Auswertung - 07.03.2015 (15)
  3. Ich bekomme "positive finds ads" nicht von meinem Rechner
    Plagegeister aller Art und deren Bekämpfung - 03.03.2015 (7)
  4. Positive Finds ist überall! und lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 21.02.2015 (17)
  5. "Ads by Positive Finds" entfernen
    Anleitungen, FAQs & Links - 15.02.2015 (2)
  6. "UniDealsi" Erweiterung in Google Chrome lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 13.02.2015 (11)
  7. Positive finds lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 13.02.2015 (18)
  8. Positive finds in google chrome entfernen?
    Plagegeister aller Art und deren Bekämpfung - 12.02.2015 (3)
  9. Google Chrome funktioniert nicht mehr (nach "Positive finds"-Malwarebekämpfung)
    Plagegeister aller Art und deren Bekämpfung - 01.02.2015 (11)
  10. Chrome Erweiterung "Download Protect 2.2.5" lässt sich nicht entfernen
    Log-Analyse und Auswertung - 03.09.2014 (14)
  11. Windows 8.1: Avira findet "TR/Swrort.A.10259" in "C:\Program Files (x86)\Google\Chrome\Application\old_chrome.exe"
    Plagegeister aller Art und deren Bekämpfung - 23.07.2014 (3)
  12. Windows7: Datei "dwm.exe" im Ordner "iswizard05" lässt sich nicht löschen
    Log-Analyse und Auswertung - 20.02.2014 (19)
  13. Browservirus lässt sich nicht entfernen "DocTooTXTConvert" Add on Google chrome
    Plagegeister aller Art und deren Bekämpfung - 17.02.2014 (3)
  14. Bluescreen beim Enfernen von "ADWARE/BProtector.E" durch Avira Antivir
    Log-Analyse und Auswertung - 08.12.2013 (9)
  15. Windows XP (+ Chrome), "Polizei"-Tab: weder Tab noch Fenster lässt sich schließen
    Plagegeister aller Art und deren Bekämpfung - 29.08.2013 (5)
  16. "Google Update"-Addon lässt sich nicht deinstallieren
    Alles rund um Windows - 30.01.2013 (24)
  17. "Funmoods Search" Startseite in Chrome lässt sich nicht entfernen - möglicher Virus?
    Plagegeister aller Art und deren Bekämpfung - 22.01.2013 (9)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. - Hallo Leute. Leider habe ich mir bei irgendeinem Freeware Download dieses mistige "Positive Finds" mit eingefangen. Es ist total nervig und ich habe alle mir bekannten Dinge oder auch Googles - Adware "Positive Finds" lässt sich in google Chrome nicht enfernen....
Archiv
Du betrachtest: Adware "Positive Finds" lässt sich in google Chrome nicht enfernen. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19