Roll Around - Werbung Spam

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-02-2015 01
Ran by Eledwhen (administrator) on ELEDWHEN-PC on 21-02-2015 13:14:09
Running from C:\Users\Eledwhen\Downloads
Loaded Profiles: Eledwhen (Available profiles: Eledwhen)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Users\Eledwhen\AppData\Roaming\InetStat\inetstat.exe
(Akamai Technologies, Inc.) C:\Users\Eledwhen\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(LG Electronics) C:\Program Files\LG Electronics\Auto Resolution\bin\AppResUtilityService.exe
(Akamai Technologies, Inc.) C:\Users\Eledwhen\AppData\Local\Akamai\netsession_win.exe
(LG Electronics Inc) C:\Program Files\LG Electronics\Auto Resolution\bin\Auto Resolution.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Eledwhen\Downloads\FRST (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-04-10] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Run: [InetStat] => C:\Users\Eledwhen\AppData\Roaming\InetStat\inetstat.exe [1325536 2014-07-08] ()
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Eledwhen\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\MountPoints2: {2ed223d7-f13f-11e3-9a56-50e549ca4fe5} - E:\Autorun.exe
AppInit_DLLs: c:\progra~2\suptab\search~1.dll => c:\progra~2\suptab\search~1.dll File Not Found
AppInit_DLLs:  c:\progra~4\fastan~1\fastan~1.dll => c:\progra~4\fastan~1\fastan~1.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PIPModeResolutionUtility.lnk
ShortcutTarget: PIPModeResolutionUtility.lnk -> C:\Program Files\LG Electronics\Auto Resolution\bin\AppResUtilityService.exe (LG Electronics)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2944993953-490532639-2261562198-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://myhome.vi-view.com/?type=hp&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://myhome.vi-view.com/?type=hp&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDTt8PVUCrSqw52C61hLp8hv9QZmpJ5Ag6gYp5YX9h9CiuEDb4WkOwFM7qcutI0GooqJR1aC_N5KIFGttSsLOWJvh3Vz9hsjYy_WK68qFkuydAXKBX6KtJtkjrYWyGbM97zPymQ1cbPguPcLUprsCa1llzxkoroDGLZRd4XLe-sFB3IvfA,,&q={searchTerms}
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://myhome.vi-view.com/?type=hp&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://myhome.vi-view.com/?type=hp&ts=1421413001&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234
HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDTt8PVUCrSqw52C61hLp8hv9QZmpJ5Ag6gYp5YX9h9CiuEDb4WkOwFM7qcutI0GooqJR1aC_N5KIFGttSsLOWJvh3Vz9hsjYy_WK68qFkuydAXKBX6KtJtkjrYWyGbM97zPymQ1cbPguPcLUprsCa1llzxkoroDGLZRd4XLe-sFB3IvfA,,&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDTt8PVUCrSqw52C61hLp8hv9QZmpJ5Ag6gYp5YX9h9CiuEDb4WkOwFM7qcutI0GooqJR1aC_N5KIFGttSsLOWJvh3Vz9hsjYy_WK68qFkuydAXKBX6KtJtkjrYWyGbM97zPymQ1cbPguPcLUprsCa1llzxkoroEoNGh-UYAuQNtQVddnw,,&q={searchTerms}
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDTt8PVUCrSqw52C61hLp8hv9QZmpJ5Ag6gYp5YX9h9CiuEDb4WkOwFM7qcutI0GooqJR1aC_N5KIFGttSsLOWJvh3Vz9hsjYy_WK68qFkuydAXKBX6KtJtkjrYWyGbM97zPymQ1cbPguPcLUprsCa1llzxkoroEoNGh-UYAuQNtQVddnw,,&q={searchTerms}
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2944993953-490532639-2261562198-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHD103SI_S1VSJ9CS507234&ts=1421413098&type=default&q={searchTerms}
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: deaal4me -> {D5CC379B-625E-74AF-A0EA-DE98A516B2F7} -> C:\ProgramData\deaal4me\1hLZqI.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2944993953-490532639-2261562198-1000: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: Default -> https://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-01]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-01]
CHR Extension: (YouTube) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-01]
CHR Extension: (Adblock Plus) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-02-11]
CHR Extension: (Google Search) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-01]
CHR Extension: (Google Wallet) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-01]
CHR Extension: (Gmail) - C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-01]
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
CHR HKLM\...\Chrome\Extension: [fdjkhamgopgokjmllcmpkiijndjeidcl] - C:\Users\Eledwhen\AppData\Local\Temp\twsfiles\trustedshopper.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2014-12-13] (NVIDIA Corporation)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1848680 2015-02-17] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [411920 2015-02-16] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18186896 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [1910128 2015-02-08] (Electronic Arts)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2014-01-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-13] (Disc Soft Ltd)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-06-12] (NetFilterSDK.com) [File not signed]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2014-11-22] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-08-15] (Avira GmbH)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-21 13:07 - 2015-02-21 13:08 - 01126400 _____ (Farbar) C:\Users\Eledwhen\Downloads\FRST (1).exe
2015-02-21 12:50 - 2015-02-21 12:52 - 00015080 _____ () C:\Users\Eledwhen\Downloads\Addition.txt
2015-02-21 12:49 - 2015-02-21 13:14 - 00020132 _____ () C:\Users\Eledwhen\Downloads\FRST.txt
2015-02-21 12:49 - 2015-02-21 13:14 - 00000000 ____D () C:\FRST
2015-02-21 12:48 - 2015-02-21 12:48 - 01126400 _____ (Farbar) C:\Users\Eledwhen\Downloads\FRST.exe
2015-02-19 08:05 - 2015-02-19 08:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-02-19 08:05 - 2015-02-19 08:05 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2015-02-18 14:57 - 2015-02-18 14:57 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\HandBrake
2015-02-18 14:51 - 2015-02-18 14:51 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\RHEng
2015-02-17 14:51 - 2015-02-17 14:51 - 00002075 _____ () C:\Users\Eledwhen\Desktop\JDownloader 2.lnk
2015-02-17 14:51 - 2015-02-17 14:51 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-02-17 14:48 - 2015-02-17 15:10 - 00000000 ____D () C:\Users\Eledwhen\AppData\Local\JDownloader 2.0
2015-02-17 14:44 - 2015-02-17 14:44 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-02-17 14:44 - 2015-02-17 14:44 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-02-17 14:43 - 2015-02-17 14:43 - 00000000 ____D () C:\Program Files\Java
2015-02-17 14:41 - 2015-02-17 14:41 - 01203488 _____ () C:\Users\Eledwhen\Downloads\Java Runtime Environment 32 Bit - CHIP-Installer.exe
2015-02-14 08:33 - 2015-02-14 08:33 - 00000000 ____D () C:\Users\Eledwhen\Desktop\7-Zip
2015-02-14 08:31 - 2015-02-14 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-02-14 08:19 - 2015-02-14 08:19 - 01203488 _____ () C:\Users\Eledwhen\Desktop\7 Zip 32 Bit - CHIP-Installer.exe
2015-02-12 10:03 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 10:03 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 09:38 - 2015-02-11 09:38 - 01606875 _____ () C:\Users\Eledwhen\Desktop\LorandiaSims3_Accessories_33.rar
2015-02-11 09:35 - 2015-02-11 09:35 - 00329234 _____ () C:\Users\Eledwhen\Desktop\LorandiaSims3_Accessories_106.zip
2015-02-11 09:35 - 2015-02-11 09:35 - 00213949 _____ () C:\Users\Eledwhen\Desktop\LorandiaSims3_Accessories_137.zip
2015-02-11 09:33 - 2015-02-11 09:33 - 00374779 _____ () C:\Users\Eledwhen\Desktop\LorandiaSims3_Accessories_45.rar
2015-02-11 08:16 - 2015-01-15 08:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 08:16 - 2015-01-15 08:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 08:16 - 2015-01-15 08:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 08:16 - 2015-01-15 08:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 08:16 - 2015-01-15 08:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 08:16 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 08:16 - 2015-01-15 08:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 08:16 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 08:16 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 08:16 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 08:16 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 08:16 - 2015-01-15 05:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 08:16 - 2015-01-09 02:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 08:15 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-11 08:15 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 08:15 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 08:15 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 08:15 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 08:15 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 08:15 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 08:15 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 08:15 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 08:15 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 08:15 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 08:15 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 08:15 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 08:15 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 08:15 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 08:15 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 08:15 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 08:15 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 08:15 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 08:15 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 08:15 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 08:15 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 08:15 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 08:15 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 08:15 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 08:15 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 08:15 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 08:15 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 08:15 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 08:15 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 08:15 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 08:15 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 08:15 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-10 10:38 - 2015-02-10 10:38 - 01093320 _____ () C:\Users\Eledwhen\Desktop\Bilder Set 2 by 19.zip
2015-02-09 13:56 - 2015-02-09 13:56 - 00581406 _____ () C:\Users\Eledwhen\Desktop\S3C Venezia Sofa 1503131343 (1).zip
2015-02-09 13:56 - 2015-02-09 13:56 - 00577077 _____ () C:\Users\Eledwhen\Desktop\S3C Venezia Sofa 2er 1503131711.zip
2015-02-09 13:55 - 2015-02-09 13:55 - 00581406 _____ () C:\Users\Eledwhen\Desktop\S3C Venezia Sofa 1503131343.zip
2015-02-09 13:50 - 2015-02-09 13:50 - 02768101 _____ () C:\Users\Eledwhen\Desktop\Long Top with Rivals by gergana.rar
2015-02-09 13:43 - 2015-02-09 13:43 - 02066778 _____ () C:\Users\Eledwhen\Desktop\MagicRetexture2UlkerHairFashionista2 (1).rar
2015-02-09 13:40 - 2015-02-09 13:40 - 02110086 _____ () C:\Users\Eledwhen\Desktop\MagicRetexture1NewSeaJ004-iris-f (1).rar
2015-02-09 13:26 - 2015-02-09 13:26 - 02110086 _____ () C:\Users\Eledwhen\Desktop\MagicRetexture1NewSeaJ004-iris-f.rar
2015-02-09 12:19 - 2015-02-14 08:39 - 00000000 ____D () C:\Users\Eledwhen\Downloads\s3
2015-02-08 18:55 - 2015-02-08 18:56 - 00000000 ____D () C:\Users\Eledwhen\Desktop\Yoga Kids GS
2015-02-08 06:21 - 2015-02-08 06:23 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\Origin
2015-02-08 06:21 - 2015-02-08 06:23 - 00000000 ____D () C:\Users\Eledwhen\AppData\Local\Origin
2015-02-08 06:21 - 2015-02-08 06:21 - 00000000 ____D () C:\Program Files\Origin Games
2015-02-08 06:20 - 2015-02-09 09:34 - 00000000 ____D () C:\ProgramData\Origin
2015-02-08 06:20 - 2015-02-09 09:34 - 00000000 ____D () C:\Program Files\Origin
2015-02-08 06:20 - 2015-02-08 06:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-08 06:20 - 2015-02-08 06:20 - 00000937 _____ () C:\Users\Public\Desktop\Origin.lnk
2015-02-08 06:20 - 2015-02-08 06:20 - 00000550 _____ () C:\Windows\KB893803v2.log
2015-02-04 20:23 - 2015-02-08 06:20 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-02-04 20:23 - 2015-02-04 20:23 - 00000000 ____D () C:\Users\Eledwhen\Documents\Electronic Arts
2015-02-04 20:06 - 2015-02-04 20:06 - 00000000 ____D () C:\Program Files\Microsoft WSE
2015-02-04 20:05 - 2015-02-04 20:05 - 00002032 _____ () C:\Users\Public\Desktop\Die*Sims™*3.lnk
2015-02-02 10:43 - 2015-02-02 10:43 - 00000342 _____ () C:\Users\Eledwhen\Desktop\antrag.txt
2015-02-01 15:44 - 2015-02-21 11:58 - 00000000 ____D () C:\Users\Eledwhen\Desktop\YGOPro DevPro
2015-02-01 13:22 - 2015-02-01 13:22 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-01 13:22 - 2015-02-01 13:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-31 10:35 - 2015-01-09 23:25 - 00621200 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2015-01-31 10:33 - 2015-01-10 03:43 - 24765584 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 20465296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 10774728 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 10714304 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 08465224 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-31 10:33 - 2015-01-10 03:43 - 03245712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 01047880 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234725.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00929424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00911504 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234725.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00906568 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00877304 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshim.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00305320 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll
2015-01-31 10:33 - 2015-01-10 03:43 - 00164752 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll
2015-01-30 18:31 - 2015-01-30 18:31 - 00000000 ____D () C:\Users\Eledwhen\Desktop\DCIM
2015-01-22 18:43 - 2015-01-22 18:43 - 00000000 ____D () C:\Users\Eledwhen\Desktop\Doc´s

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-21 13:03 - 2014-07-12 16:03 - 00000304 _____ () C:\Windows\Tasks\Rocket Updater.job
2015-02-21 13:01 - 2014-07-12 19:47 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-21 12:55 - 2014-06-01 19:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-21 12:52 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-21 12:52 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-21 12:40 - 2014-08-19 21:40 - 00000304 _____ () C:\Windows\Tasks\PriceMeterUpdater.job
2015-02-21 12:36 - 2014-08-19 21:35 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\DVDVideoSoft
2015-02-21 12:36 - 2014-08-19 21:35 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2015-02-21 09:54 - 2014-07-12 19:47 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-21 09:54 - 2014-06-03 18:11 - 00000000 ____D () C:\Users\Eledwhen\AppData\Local\LogMeIn Hamachi
2015-02-21 09:54 - 2014-06-01 17:40 - 01300668 _____ () C:\Windows\WindowsUpdate.log
2015-02-21 09:50 - 2014-06-01 19:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-21 09:50 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-21 09:50 - 2009-07-14 05:39 - 00071745 _____ () C:\Windows\setupact.log
2015-02-19 08:17 - 2010-11-20 22:48 - 00196548 _____ () C:\Windows\PFRO.log
2015-02-19 08:05 - 2014-06-03 18:10 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2015-02-18 14:51 - 2014-08-19 21:37 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-02-18 14:51 - 2014-08-19 21:37 - 00000000 ____D () C:\ProgramData\TuneUp Software
2015-02-17 21:29 - 2014-06-13 12:26 - 00000000 ____D () C:\Users\Eledwhen\AppData\Roaming\Skype
2015-02-17 14:51 - 2015-01-16 13:56 - 00000000 ____D () C:\Program Files\JDownloader
2015-02-17 14:44 - 2014-06-01 19:22 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-17 14:44 - 2014-06-01 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-02-16 16:20 - 2014-06-25 09:36 - 00026176 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-02-14 17:05 - 2006-11-02 14:33 - 00000000 ___RD () C:\Program Files (x86)
2015-02-13 17:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-02-11 14:38 - 2009-07-14 05:33 - 00267160 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 14:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2015-02-11 14:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT
2015-02-11 14:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2015-02-11 14:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-02-11 13:08 - 2015-01-03 18:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 13:03 - 2014-06-01 18:11 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 08:07 - 2014-08-24 09:05 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-11 08:07 - 2014-08-24 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-11 08:07 - 2014-08-24 09:03 - 00000000 ____D () C:\Program Files\Avira
2015-02-09 12:22 - 2012-10-20 13:29 - 00000000 ____D () C:\Users\Eledwhen\Desktop\Mama Musik
2015-02-05 19:55 - 2014-06-01 19:26 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-05 19:55 - 2014-06-01 19:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-04 20:21 - 2014-06-29 16:39 - 00000000 ____D () C:\Program Files\Electronic Arts
2015-02-04 20:06 - 2009-07-14 05:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-04 19:52 - 2014-06-01 18:39 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-02-04 15:36 - 2014-06-01 18:47 - 00000000 ____D () C:\Users\Eledwhen\Downloads\Gameforge Live
2015-02-03 12:53 - 2014-06-10 15:28 - 00000000 ____D () C:\ProgramData\HappyCloud
2015-02-03 12:53 - 2012-03-21 17:12 - 00000000 ____D () C:\Users\Eledwhen\Desktop\Der Herr der Ringe Online
2015-02-01 13:22 - 2014-07-12 19:47 - 00000000 ____D () C:\Program Files\Google
2015-02-01 13:22 - 2014-07-08 07:57 - 00000000 ____D () C:\Users\Eledwhen\AppData\Local\Google
2015-02-01 12:06 - 2014-06-15 17:32 - 00000000 ____D () C:\Users\Eledwhen\AppData\Local\The Lord of the Rings Online
2015-02-01 10:57 - 2014-06-13 12:36 - 00000000 ____D () C:\Users\Eledwhen\Documents\The Lord of the Rings Online
2015-01-31 10:37 - 2014-08-23 09:09 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-01-31 10:37 - 2014-08-23 09:09 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-01-31 10:37 - 2014-08-23 09:09 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-01-31 10:35 - 2015-01-03 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-22 13:41 - 2014-06-05 11:23 - 00000041 _____ () C:\Users\Eledwhen\Documents\mt-x_hook.txt
2015-01-22 13:41 - 2014-06-05 11:23 - 00000007 _____ () C:\Users\Eledwhen\Documents\mt-e_hook.txt

==================== Files in the root of some directories =======

2014-07-30 20:03 - 2014-08-24 06:45 - 0000096 _____ () C:\Users\Eledwhen\AppData\Roaming\WB.CFG
2014-06-04 10:28 - 2014-07-02 11:15 - 0007601 _____ () C:\Users\Eledwhen\AppData\Local\Resmon.ResmonCfg
2014-07-31 14:18 - 2014-07-31 14:18 - 0000057 _____ () C:\ProgramData\Ament.ini

Some content of TEMP:
====================
C:\Users\Eledwhen\AppData\Local\Temp\130658864499516422.exe
C:\Users\Eledwhen\AppData\Local\Temp\13065886451512221962.exe
C:\Users\Eledwhen\AppData\Local\Temp\AutoRun.exe
C:\Users\Eledwhen\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Eledwhen\AppData\Local\Temp\avgnt.exe
C:\Users\Eledwhen\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Eledwhen\AppData\Local\Temp\dxwebsetup.exe
C:\Users\Eledwhen\AppData\Local\Temp\EAD5494.exe
C:\Users\Eledwhen\AppData\Local\Temp\EADED2B.exe
C:\Users\Eledwhen\AppData\Local\Temp\EADF594.exe
C:\Users\Eledwhen\AppData\Local\Temp\EADFDAF.exe
C:\Users\Eledwhen\AppData\Local\Temp\EAInstall.dll
C:\Users\Eledwhen\AppData\Local\Temp\FreeDVDVideoConverter.exe
C:\Users\Eledwhen\AppData\Local\Temp\GoogleSetup.exe
C:\Users\Eledwhen\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Eledwhen\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Eledwhen\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Eledwhen\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Eledwhen\AppData\Local\Temp\nvStInst.exe
C:\Users\Eledwhen\AppData\Local\Temp\proxy_vole1938113295337832202.dll
C:\Users\Eledwhen\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Eledwhen\AppData\Local\Temp\tmd_34012129.exe
C:\Users\Eledwhen\AppData\Local\Temp\tmd_34014236.exe
C:\Users\Eledwhen\AppData\Local\Temp\tmd_34018651.exe
C:\Users\Eledwhen\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Eledwhen\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Eledwhen\AppData\Local\Temp\YgoUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 12:07

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-02-2015 01
Ran by Eledwhen at 2015-02-21 12:51:59
Running from C:\Users\Eledwhen\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AION Free-to-Play (HKLM\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)
Akamai NetSession Interface (HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Aufstieg des Hexenkönigs™ (HKLM\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version:  - )
Auto Resolution (HKLM\...\{403F1594-BC16-47A5-B365-F73CD69D720E}) (Version: 1.8 - LG Electronics Inc.)
Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Der Herr der Ringe Online (HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\LOTROde) (Version:  - )
Die Schlacht um Mittelerde™ II (HKLM\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
Die Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Fast And Safe (HKLM\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf}) (Version:  - GTgroup) <==== ATTENTION
Gameforge Live 2.0.5 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)
Google Drive (HKLM\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Happy Cloud Client (HKU\S-1-5-21-2944993953-490532639-2261562198-1000\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.)
HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (HKLM\...\{9C31FFDC-E796-4884-B990-41B9A5B2A647}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series Hilfe (HKLM\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Installer (HKLM\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.319 - LogMeIn, Inc.)
LogMeIn Hamachi (Version: 2.2.0.319 - LogMeIn, Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
MegaTrainer eXperience V1.2.4.1 (HKLM\...\MegaTrainer eXperience_is1) (Version:  - )
Microsoft .NET Framework 4.5.1 (HKLM\...\{7F66508F-100B-380E-A7BB-379CDC3FE30A}) (Version: 4.5.51078 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WindowsMangerProtect20.0.0.502 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2944993953-490532639-2261562198-1000_Classes\CLSID\{b226c901-b163-53c9-a14c-5b55ebb03907}\InprocServer32 -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)

==================== Restore Points  =========================

22-12-2014 18:21:14 Removed Aeria Ignite
30-12-2014 09:10:15 Geplanter Prüfpunkt
03-01-2015 17:55:10 Windows Update
03-01-2015 18:17:33 Windows Update
03-01-2015 19:09:01 Windows Update
03-01-2015 19:33:04 Gerätetreiber-Paketinstallation: NVIDIA Grafikkarte
03-01-2015 19:42:43 Gerätetreiber-Paketinstallation: NVIDIA Corporation Audio-, Video- und Gamecontroller
03-01-2015 19:43:10 Gerätetreiber-Paketinstallation: NVIDIA USB-Controller
03-01-2015 22:57:58 Windows Update
04-01-2015 23:48:10 Windows Update
12-01-2015 12:25:20 Geplanter Prüfpunkt
14-01-2015 13:00:37 Windows Update
16-01-2015 13:54:58 Uniblue SpeedUpMyPC installation
24-01-2015 12:41:51 Geplanter Prüfpunkt
31-01-2015 15:35:05 Geplanter Prüfpunkt
04-02-2015 19:51:42 Installiert The Sims 3
11-02-2015 13:00:43 Windows Update
12-02-2015 13:00:37 Windows Update
17-02-2015 14:42:51 Removed Java 8 Update 31

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {01E077D0-B33E-4319-91FD-93A669ABF655} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28] (Hewlett-Packard)
Task: {02C3D6CD-31AC-4B50-8FDA-67B060F254E6} - System32\Tasks\{1A4D39D7-E267-485B-B5F8-068A4022ADBC} => pcalua.exe -a "C:\Program Files\HDtubeV1.6\Uninstall.exe" -c /fcp=1
Task: {11E5B479-39E5-4077-86BE-2ED09165FEAC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {300C42D2-C324-48EC-8ECF-A52A0441F834} - System32\Tasks\{3829886B-9B87-4FE6-A831-C510F483CA88} => C:\Program Files\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe [2014-01-16] (Electronic Arts, Inc.)
Task: {56CC2BC5-E3B9-4FE4-AE73-DECB5092C8AC} - System32\Tasks\{86996472-0B9B-41C3-B2D7-0B85E033D762} => C:\Users\Eledwhen\Desktop\Der Herr der Ringe Online\TurbineLauncher.exe [2015-01-07] (Turbine, Inc.)
Task: {593F9AC6-8C47-4278-9CB9-FDA72BE7120C} - System32\Tasks\PriceMeterUpdater => C:\Users\Eledwhen\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {612BE1BC-0C42-4D8F-9950-5161B5F8760B} - System32\Tasks\Rocket Updater => C:\Users\Eledwhen\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {68AE809B-B0ED-4CF8-AB36-F4CF5AAFE181} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {72BCC9B1-0F5B-479C-BD11-C88CC4AEF4E0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {805997C9-F479-484A-AF3F-AAD15448125F} - System32\Tasks\{DB599D11-05A8-4006-89CA-216A8E24B2F3} => C:\Program Files\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe [2014-01-16] (Electronic Arts, Inc.)
Task: {81D23805-6F7D-4F2B-AFB9-E0D3DD54E015} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {86331D12-4C0B-458F-9038-3955099C4F40} - System32\Tasks\{DEE07ADA-3A63-4071-AF7C-AAF1AA03C8DE} => C:\Program Files\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe [2014-01-16] (Electronic Arts, Inc.)
Task: {9677995B-1248-44D0-B5D4-31E37C027595} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-12] (Google Inc.)
Task: {AC49DAD7-9DBB-45E1-B9DA-CB4FBAD81E60} - System32\Tasks\{6B80E54D-79DB-4AB1-B144-91B99B26D698} => pcalua.exe -a C:\Users\Eledwhen\AppData\Roaming\sweet-page\UninstallManager.exe -c  -ptid=cor
Task: {ACC3E5AE-985A-4663-BBDE-B934C4E77B34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-12] (Google Inc.)
Task: {D4ABCA86-2D06-4CD3-A57E-9DEE655A248F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {EAC6DB69-003E-468A-9501-320611703879} - System32\Tasks\{683BB715-7432-4167-A0C6-0C8547CB99F2} => pcalua.exe -a C:\NVIDIA\DisplayDriver\337.88\Win8_WinVista_Win7\International\Display.Driver\dbInstaller.exe -d C:\NVIDIA\DisplayDriver\337.88\Win8_WinVista_Win7\International\Display.Driver

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PriceMeterUpdater.job => C:\Users\Eledwhen\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\Rocket Updater.job => C:\Users\Eledwhen\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2014-06-02 17:29 - 2015-01-09 23:58 - 00107848 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-07-08 07:58 - 2014-07-08 07:58 - 01325536 _____ () C:\Users\Eledwhen\AppData\Roaming\InetStat\inetstat.exe
2014-06-01 19:08 - 2013-08-02 08:53 - 00521728 _____ () C:\Windows\system32\LGErrorHandler.dll
2014-08-12 09:03 - 2014-08-12 09:03 - 00332800 _____ () C:\ProgramData\deaal4me\1hLZqI.dll
2015-02-01 13:22 - 2015-01-27 04:44 - 01117512 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.94\libglesv2.dll
2015-02-01 13:22 - 2015-01-27 04:44 - 00211272 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.94\libegl.dll
2015-02-01 13:22 - 2015-01-27 04:44 - 09171272 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.94\pdf.dll
2015-02-05 12:02 - 2015-02-03 12:22 - 14964912 _____ () C:\Users\Eledwhen\AppData\Local\Google\Chrome\User Data\PepperFlash\16.0.0.305\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2944993953-490532639-2261562198-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Eledwhen\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================