Fehler "Ungültiges Bild" bei jedem Programmstart

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:40 on 17/03/2015 (mmmurpark)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by mmmurpark (administrator) on LAPTOP on 17-03-2015 18:01:28
Running from C:\Users\mmmurpark\Downloads
Loaded Profiles: mmmurpark (Available profiles: mmmurpark)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Power Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-03-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-15] (Apple Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\RunOnce: [Adobe Speed Launcher] => 1426588983
HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Packard Bell.scr [456224 2010-07-29] ()
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [256272 2015-02-19] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-4276475938-3837995224-2700496704-1000] => http=127.0.0.1:8123;https=127.0.0.1:8123;socks=127.0.0.1:1080
HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2736476&UP=SP3E7A4BD6-209F-48EC-87F7-815CEDABE8C3&SSPV=SP2151_sp_ie
URLSearchHook: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000 - (No Name) - {7e111a5c-3d11-4f56-9463-5310c3c69025} - No File
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M6E1C784E-F336-445E-B0DF-10132CB166CF&SearchSource=58&CUI=&UM=5&UP=SP3E7A4BD6-209F-48EC-87F7-815CEDABE8C3&q={searchTerms}&SSPV=SP2151_sp_ie
SearchScopes: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M6E1C784E-F336-445E-B0DF-10132CB166CF&SearchSource=58&CUI=&UM=5&UP=SP3E7A4BD6-209F-48EC-87F7-815CEDABE8C3&q={searchTerms}&SSPV=SP2151_sp_ie
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000 -> No Name - {7E111A5C-3D11-4F56-9463-5310C3C69025} -  No File
Toolbar: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL No File
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M6E1C784E-F336-445E-B0DF-10132CB166CF&SearchSource=69&CUI=&SSPV=SP2151_sp_ff&Lay=1&UM=5&UP=SP3E7A4BD6-209F-48EC-87F7-815CEDABE8C3
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.gmx.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2011-08-30] ( )
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2015-02-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2011-08-30] ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default\searchplugins\avira-safesearch.xml [2015-02-27]
FF Extension: Avira Browser Safety - C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default\Extensions\abs@avira.com [2015-03-09]
FF Extension: Avira SafeSearch - C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default\Extensions\safesearch@avira.com [2015-02-27]
FF Extension: GMX MailCheck - C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default\Extensions\toolbar@gmx.net [2015-03-01]
FF Extension: Adblock Plus - C:\Users\mmmurpark\AppData\Roaming\Mozilla\Firefox\Profiles\tqweru2j.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-10-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-03-09]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-03-09]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-03-09]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-11] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2948880 2015-02-19] () [File not signed]
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-05-10] (Acer Incorporated)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2015-02-09] (WildTangent)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [39528 2011-01-18] (Acer Incorporated)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2015-02-20] (Microsoft Corporation) [File not signed]
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-11] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-11] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R0 PxHlpa64; C:\Windows\SysWOW64\Drivers\PxHlpa64.sys [26720 2004-09-23] (Sonic Solutions) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-17 17:40 - 2015-03-17 17:40 - 00000550 _____ () C:\Users\mmmurpark\Downloads\defogger_disable.log
2015-03-17 17:40 - 2015-03-17 17:40 - 00000168 _____ () C:\Users\mmmurpark\defogger_reenable
2015-03-17 17:39 - 2015-03-17 17:39 - 00050477 _____ () C:\Users\mmmurpark\Downloads\Defogger.exe
2015-03-17 11:38 - 2015-03-17 11:38 - 00120920 _____ () C:\Users\mmmurpark\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-17 11:37 - 2015-03-17 11:37 - 00001455 _____ () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-17 11:37 - 2015-03-17 11:37 - 00001421 _____ () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-03-17 07:12 - 2015-03-17 07:12 - 01559112 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-03-17 07:04 - 2015-03-17 07:04 - 00000020 ___SH () C:\Users\mmmurpark\ntuser.ini
2015-03-17 06:13 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-03-17 06:13 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-03-17 06:13 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-03-17 06:13 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-03-17 06:13 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-03-17 06:13 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-03-17 06:13 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-03-17 06:13 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-03-17 06:13 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-03-17 06:13 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-03-17 06:13 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-03-17 06:13 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-03-17 06:13 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-03-17 06:13 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Favoriten
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-03-17 06:12 - 2015-03-17 06:12 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-03-17 02:13 - 2015-03-17 17:34 - 01065094 _____ () C:\Windows\WindowsUpdate.log
2015-03-17 01:53 - 2015-03-17 01:53 - 00022960 _____ () C:\Windows\system32\emptyregdb.dat
2015-03-17 01:47 - 2015-03-17 01:47 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-03-17 01:46 - 2015-03-17 01:46 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-03-17 01:46 - 2015-03-17 01:46 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-03-17 01:46 - 2015-03-17 01:46 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-03-17 01:46 - 2015-03-17 01:46 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-03-17 01:00 - 2015-03-17 17:40 - 00000000 ____D () C:\Users\mmmurpark
2015-03-17 01:00 - 2015-03-17 01:00 - 00001355 _____ () C:\Windows\TSSysprep.log
2015-03-17 01:00 - 2015-03-17 01:00 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-03-17 01:00 - 2015-03-17 01:00 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Vorlagen
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Startmenü
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Netzwerkumgebung
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Lokale Einstellungen
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Eigene Dateien
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Druckumgebung
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Documents\Eigene Musik
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Documents\Eigene Bilder
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\AppData\Local\Verlauf
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\AppData\Local\Anwendungsdaten
2015-03-17 01:00 - 2015-03-17 01:00 - 00000000 _SHDL () C:\Users\mmmurpark\Anwendungsdaten
2015-03-17 01:00 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-17 01:00 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-17 00:59 - 2015-03-17 00:59 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-03-17 00:59 - 2015-03-17 00:59 - 00000000 ____D () C:\Program Files\Realtek
2015-03-17 00:59 - 2015-03-17 00:59 - 00000000 ____D () C:\Program Files\Elantech
2015-03-17 00:55 - 2015-03-17 06:12 - 00000000 ____D () C:\Windows\Panther
2015-03-17 00:53 - 2015-03-17 00:53 - 00262144 _____ () C:\Windows\system32\config\userdiff
2015-03-17 00:41 - 2015-03-17 01:54 - 00000000 ___HD () C:\$WINDOWS.~Q
2015-03-17 00:29 - 2015-03-17 00:37 - 00000000 ___HD () C:\$INPLACE.~TR
2015-03-16 23:53 - 2015-03-17 01:54 - 00006115 _____ () C:\Windows\comsetup.log
2015-03-16 23:43 - 2015-03-16 23:43 - 00003862 _____ () C:\Users\mmmurpark\Desktop\Windows-Kompatibilitätsbericht.htm
2015-03-16 23:39 - 2015-03-16 23:40 - 00002544 _____ () C:\Windows\diagwrn.xml
2015-03-16 23:39 - 2015-03-16 23:39 - 00001890 _____ () C:\Windows\diagerr.xml
2015-03-16 23:15 - 2011-02-19 12:18 - 3284992000 _____ () C:\Users\mmmurpark\Downloads\win7x64sp1.iso
2015-03-16 22:45 - 2015-03-17 01:43 - 00000000 ____D () C:\Users\mmmurpark\Downloads\win7x64sp1
2015-03-16 21:51 - 2015-03-16 22:44 - 1429732278 _____ () C:\Users\mmmurpark\Downloads\win7x64sp1.part2.rar
2015-03-16 21:50 - 2015-03-16 22:48 - 1600000000 _____ () C:\Users\mmmurpark\Downloads\win7x64sp1.part1.exe
2015-03-16 21:36 - 2015-03-16 21:37 - 00038322 _____ () C:\Users\mmmurpark\Downloads\Addition.txt
2015-03-16 21:35 - 2015-03-17 18:01 - 00021635 _____ () C:\Users\mmmurpark\Downloads\FRST.txt
2015-03-16 21:34 - 2015-03-17 18:01 - 00000000 ____D () C:\FRST
2015-03-16 21:34 - 2015-03-16 21:34 - 02095616 _____ (Farbar) C:\Users\mmmurpark\Downloads\FRST64.exe
2015-03-16 21:29 - 2015-03-17 01:15 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-16 21:29 - 2015-03-16 21:29 - 00001240 _____ () C:\Users\mmmurpark\Desktop\Revo Uninstaller.lnk
2015-03-16 21:28 - 2015-03-16 21:28 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\mmmurpark\Downloads\revosetup95.exe
2015-03-16 20:52 - 2015-03-16 20:52 - 00000063 _____ () C:\Windows\Product Key.txt
2015-03-12 07:03 - 2015-03-12 07:03 - 00000000 _____ () C:\Windows\SysWOW64\shoA655.tmp
2015-03-11 21:41 - 2015-03-11 21:41 - 00021976 _____ () C:\Windows\system32\Drivers\SPPD.sys
2015-03-11 21:24 - 2015-02-20 04:05 - 00004096 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 21:24 - 2015-02-20 03:49 - 00048640 ____N (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 21:24 - 2015-02-20 03:47 - 00088064 ____N (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 21:24 - 2015-02-20 03:35 - 00114688 ____N (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 21:24 - 2015-02-20 03:34 - 00814080 ____N (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 21:24 - 2015-02-20 03:32 - 06035456 ____N (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 21:24 - 2015-02-20 03:26 - 00968704 ____N (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 21:24 - 2015-02-20 03:13 - 00077824 ____N (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 21:24 - 2015-02-20 03:08 - 00047616 ____N (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 21:24 - 2015-02-20 03:06 - 00064000 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 21:24 - 2015-02-20 02:56 - 00620032 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 21:24 - 2015-02-20 02:47 - 01359360 ____N (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 21:24 - 2015-02-20 02:41 - 00060416 ____N (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 21:24 - 2015-02-20 02:30 - 04300288 ____N (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 21:24 - 2015-02-20 02:23 - 01155072 ____N (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-09 23:25 - 2015-03-17 01:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-04 10:20 - 2015-03-04 10:20 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\{6D8864F2-97F9-4646-ACCD-78202A3B5F28}
2015-03-04 10:18 - 2015-03-04 10:18 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\{32F48A63-9D08-434A-A8E3-6BD9C845A482}
2015-02-25 11:24 - 2015-02-25 11:24 - 00107784 _____ () C:\Users\mmmurpark\Downloads\databox(2)
2015-02-25 10:48 - 2015-02-25 10:48 - 00090636 _____ () C:\Users\mmmurpark\Downloads\databox(1)
2015-02-25 10:48 - 2015-02-25 10:48 - 00090636 _____ () C:\Users\mmmurpark\Downloads\databox
2015-02-24 21:24 - 2015-02-24 21:24 - 00000000 _____ () C:\Windows\SysWOW64\sho838B.tmp
2015-02-19 21:07 - 2015-01-09 04:14 - 00029696 ____N (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-19 20:58 - 2015-03-17 01:37 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\avaxvyyvyf
2015-02-17 15:26 - 2015-02-17 15:26 - 01217184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-17 17:35 - 2010-11-21 07:50 - 00698926 _____ () C:\Windows\system32\perfh007.dat
2015-03-17 17:35 - 2010-11-21 07:50 - 00149034 _____ () C:\Windows\system32\perfc007.dat
2015-03-17 17:35 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-17 17:34 - 2012-04-05 19:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-17 13:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-17 11:55 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-17 11:55 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-17 11:43 - 2012-10-05 18:50 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-03-17 11:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-17 11:40 - 2009-07-14 05:51 - 00608337 _____ () C:\Windows\setupact.log
2015-03-17 11:38 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-17 11:38 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-03-17 07:03 - 2010-11-21 04:47 - 00012026 _____ () C:\Windows\PFRO.log
2015-03-17 06:12 - 2011-09-01 13:54 - 00000000 __SHD () C:\Recovery
2015-03-17 06:12 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2015-03-17 06:12 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-03-17 06:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2015-03-17 06:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-03-17 01:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Registration
2015-03-17 01:51 - 2012-11-23 13:56 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2015-03-17 01:51 - 2011-10-04 16:23 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-03-17 01:51 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-03-17 01:47 - 2009-07-14 05:45 - 00486704 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-17 01:46 - 2014-06-20 22:56 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-03-17 01:46 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-17 01:46 - 2009-07-14 05:46 - 00005157 _____ () C:\Windows\DtcInstall.log
2015-03-17 01:46 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-17 01:46 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-17 01:46 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-17 01:46 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-17 01:45 - 2013-03-09 23:46 - 00000074 _____ () C:\Windows\wininit.ini
2015-03-17 01:44 - 2014-06-30 20:10 - 00000000 ___RD () C:\Users\mmmurpark\OneDrive
2015-03-17 01:44 - 2012-07-18 18:28 - 00000000 ___RD () C:\Users\mmmurpark\Dropbox
2015-03-17 01:44 - 2012-01-30 15:03 - 00000000 ____D () C:\Users\mmmurpark\MediaEspresso
2015-03-17 01:44 - 2011-09-01 14:53 - 00000000 ____D () C:\Users\mmmurpark\Sun
2015-03-17 01:43 - 2015-01-13 00:23 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\pdfforge
2015-03-17 01:43 - 2014-12-03 13:30 - 00000000 ____D () C:\Users\mmmurpark\Desktop\druckaktion 03.12.2014
2015-03-17 01:43 - 2014-11-23 17:07 - 00000000 ____D () C:\Users\mmmurpark\Desktop\druckaktion 23.11.2014
2015-03-17 01:43 - 2014-10-04 15:05 - 00000000 ____D () C:\Users\mmmurpark\Desktop\druckaktion 04.10.2014
2015-03-17 01:43 - 2014-06-20 22:30 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\WinRAR
2015-03-17 01:43 - 2013-11-09 17:32 - 00000000 ____D () C:\Users\mmmurpark\Documents\Steinberg
2015-03-17 01:43 - 2013-09-23 18:23 - 00000000 ____D () C:\Users\mmmurpark\Downloads\circle training
2015-03-17 01:43 - 2013-06-19 22:59 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\WildTangent
2015-03-17 01:43 - 2013-02-25 18:59 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Thunderbird
2015-03-17 01:43 - 2013-01-13 22:01 - 00000000 ____D () C:\Users\mmmurpark\Documents\Cubase LE AI Elements Projects
2015-03-17 01:43 - 2012-11-28 22:00 - 00000000 ____D () C:\Users\mmmurpark\Documents\Adobe
2015-03-17 01:43 - 2012-11-26 23:25 - 00000000 ____D () C:\Users\mmmurpark\Documents\VST3 Presets
2015-03-17 01:43 - 2012-11-26 22:56 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Steinberg
2015-03-17 01:43 - 2012-11-08 17:18 - 00000000 ____D () C:\Users\mmmurpark\Downloads\Amy und die Wildgänse
2015-03-17 01:43 - 2012-10-27 22:42 - 00000000 ____D () C:\Users\mmmurpark\Documents\REAPER Media
2015-03-17 01:43 - 2012-10-27 21:53 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\REAPER
2015-03-17 01:43 - 2012-10-12 15:28 - 00000000 ____D () C:\Users\mmmurpark\Downloads\WeTransfer-7KRqOtyN
2015-03-17 01:43 - 2012-08-31 15:55 - 00000000 ____D () C:\Users\mmmurpark\Downloads\Bluetooth_Atheros_6.18.0624.0302_W7x64_3
2015-03-17 01:43 - 2012-07-20 06:28 - 00000000 ____D () C:\Users\mmmurpark\Downloads\Archiv
2015-03-17 01:43 - 2012-06-24 20:03 - 00000000 ____D () C:\Users\mmmurpark\Downloads\LoyalFame
2015-03-17 01:43 - 2012-06-24 20:02 - 00000000 ____D () C:\Users\mmmurpark\Downloads\TheOnlyException
2015-03-17 01:43 - 2012-06-24 20:00 - 00000000 ____D () C:\Users\mmmurpark\Downloads\HenryMorganHand
2015-03-17 01:43 - 2012-06-24 19:58 - 00000000 ____D () C:\Users\mmmurpark\Downloads\Abbeyline
2015-03-17 01:43 - 2012-03-07 17:51 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\vlc
2015-03-17 01:43 - 2012-02-16 10:00 - 00000000 ____D () C:\Users\mmmurpark\Documents\Fax
2015-03-17 01:43 - 2012-01-14 19:42 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Skype
2015-03-17 01:43 - 2011-12-03 14:25 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\SNS
2015-03-17 01:43 - 2011-11-17 22:37 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\OpenOffice.org
2015-03-17 01:43 - 2011-10-18 13:20 - 00000000 ____D () C:\Users\mmmurpark\Downloads\br440_db_1280_Pattrick
2015-03-17 01:43 - 2011-10-13 21:02 - 00000000 ____D () C:\Users\mmmurpark\Downloads\595699-595705-1-popmusic_arbeitsmaterial
2015-03-17 01:43 - 2011-10-05 22:12 - 00000000 ____D () C:\Users\mmmurpark\Downloads\eMule
2015-03-17 01:43 - 2011-10-04 16:23 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\SoftGrid Client
2015-03-17 01:42 - 2014-06-20 22:52 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\OpenCandy
2015-03-17 01:42 - 2014-06-20 22:52 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\DAEMON Tools Lite
2015-03-17 01:42 - 2014-06-20 22:28 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-17 01:42 - 2013-10-27 20:00 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\OpenOffice
2015-03-17 01:42 - 2013-10-22 19:09 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\HpUpdate
2015-03-17 01:42 - 2013-04-02 17:57 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\EurekaLog
2015-03-17 01:42 - 2012-11-26 22:56 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase LE AI Elements 6 64bit
2015-03-17 01:42 - 2012-11-16 14:51 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Epson
2015-03-17 01:42 - 2012-09-27 17:48 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\mquadr.at
2015-03-17 01:42 - 2012-07-18 18:27 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-17 01:42 - 2012-07-18 18:27 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Dropbox
2015-03-17 01:42 - 2012-04-22 17:22 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\dvdcss
2015-03-17 01:42 - 2012-04-10 22:57 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\ContentLauncher
2015-03-17 01:42 - 2012-01-30 15:01 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\CyberLink
2015-03-17 01:42 - 2011-11-02 22:43 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\juv
2015-03-17 01:42 - 2011-10-13 19:01 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\GanymedeNet
2015-03-17 01:42 - 2011-10-05 13:04 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Mozilla
2015-03-17 01:42 - 2011-10-01 17:37 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Nero
2015-03-17 01:42 - 2011-09-01 13:54 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Macromedia
2015-03-17 01:41 - 2015-01-13 00:26 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\pdfforge
2015-03-17 01:41 - 2014-10-07 18:41 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Skype
2015-03-17 01:41 - 2014-09-11 21:42 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Audacity
2015-03-17 01:41 - 2014-07-02 22:56 - 00000000 ____D () C:\Users\mmmurpark\AppData\OICE_15_974FA576_32C1D314_2156
2015-03-17 01:41 - 2014-06-30 20:19 - 00000000 ____D () C:\Users\mmmurpark\AppData\OICE_15_974FA576_32C1D314_140E
2015-03-17 01:41 - 2014-06-30 20:18 - 00000000 ____D () C:\Users\mmmurpark\AppData\OICE_15_974FA576_32C1D314_20B8
2015-03-17 01:41 - 2014-06-20 22:52 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\SearchProtect
2015-03-17 01:41 - 2014-06-20 21:33 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\BitTorrent
2015-03-17 01:41 - 2014-02-09 00:46 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\ KORG N5 user guide
2015-03-17 01:41 - 2013-05-27 18:10 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2015-03-17 01:41 - 2013-04-22 18:52 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Apowersoft
2015-03-17 01:41 - 2013-04-02 19:06 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Avira
2015-03-17 01:41 - 2013-02-25 18:59 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Thunderbird
2015-03-17 01:41 - 2012-11-23 13:58 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Apple Computer
2015-03-17 01:41 - 2012-09-27 17:03 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\mquadr.at
2015-03-17 01:41 - 2012-09-27 16:55 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\A1 Servicecenter
2015-03-17 01:41 - 2012-01-12 20:33 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Zipeg
2015-03-17 01:41 - 2011-12-17 15:33 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Windows Live
2015-03-17 01:41 - 2011-10-29 10:00 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\ATI
2015-03-17 01:41 - 2011-10-19 14:18 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Nero_AG
2015-03-17 01:41 - 2011-10-05 13:04 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Mozilla
2015-03-17 01:41 - 2011-10-04 16:23 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\SoftGrid Client
2015-03-17 01:41 - 2011-09-01 14:07 - 00000000 ____D () C:\Users\mmmurpark\AppData\Roaming\Adobe
2015-03-17 01:41 - 2011-09-01 13:55 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\VirtualStore
2015-03-17 01:37 - 2015-01-13 00:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-03-17 01:37 - 2014-11-23 17:37 - 00000000 ____D () C:\Users\mmmurpark\.jordan
2015-03-17 01:37 - 2014-06-16 23:55 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Adobe
2015-03-17 01:37 - 2014-03-04 23:46 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Easy CD-DA Extractor
2015-03-17 01:37 - 2013-10-22 18:21 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\HP
2015-03-17 01:37 - 2013-10-03 10:15 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Loksim3D
2015-03-17 01:37 - 2012-11-26 22:45 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\eLicenser
2015-03-17 01:37 - 2012-11-23 13:58 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Apple Computer
2015-03-17 01:37 - 2012-11-23 13:56 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Apple
2015-03-17 01:37 - 2012-11-16 14:35 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\ABBYY
2015-03-17 01:37 - 2012-09-28 13:50 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\A1TA
2015-03-17 01:37 - 2012-08-31 15:20 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\CrashRpt
2015-03-17 01:37 - 2012-06-23 16:32 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Macromedia
2015-03-17 01:37 - 2012-01-12 20:33 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\com.zipeg
2015-03-17 01:37 - 2011-11-28 18:05 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Cyberlink
2015-03-17 01:37 - 2011-11-06 22:51 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\Microsoft Games
2015-03-17 01:37 - 2011-10-29 10:00 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\ATI
2015-03-17 01:37 - 2011-10-18 05:49 - 00000000 ____D () C:\Users\mmmurpark\AppData\Local\CrashDumps
2015-03-17 01:21 - 2014-12-15 21:45 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-17 01:21 - 2014-05-12 07:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-17 01:21 - 2012-11-11 22:58 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2015-03-17 01:21 - 2011-12-22 23:15 - 00000000 ____D () C:\Windows\SysWOW64\color
2015-03-17 01:21 - 2011-10-24 09:29 - 00000000 ____D () C:\Windows\Sun
2015-03-17 01:21 - 2011-10-11 10:20 - 00000000 ____D () C:\Windows\SysWOW64\System
2015-03-17 01:21 - 2011-10-11 10:20 - 00000000 ____D () C:\Windows\SysWOW64\SetupLanguages
2015-03-17 01:21 - 2011-10-11 10:20 - 00000000 ____D () C:\Windows\SysWOW64\Patches
2015-03-17 01:21 - 2011-10-11 10:20 - 00000000 ____D () C:\Windows\SysWOW64\Output
2015-03-17 01:21 - 2011-10-11 10:20 - 00000000 ____D () C:\Windows\SysWOW64\BuilderLanguages
2015-03-17 01:21 - 2011-10-05 13:53 - 00000000 ____D () C:\Windows\system32\Macromed
2015-03-17 01:21 - 2011-08-17 07:46 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2015-03-17 01:21 - 2011-07-25 11:15 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-03-17 01:21 - 2011-07-25 11:06 - 00000000 ____D () C:\Windows\OEMTemp
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\tr
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\th
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\sv
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\sl
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\sk
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\ru
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\ro
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\pl
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\no
2015-03-17 01:21 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\nl
2015-03-17 01:21 - 2011-07-25 10:56 - 00000000 ____D () C:\Windows\oem
2015-03-17 01:21 - 2011-07-25 10:20 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2015-03-17 01:21 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2015-03-17 01:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-17 01:20 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\it
2015-03-17 01:19 - 2014-08-20 13:53 - 00000000 ____D () C:\Windows\Hewlett-Packard
2015-03-17 01:19 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\hu
2015-03-17 01:19 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\hr
2015-03-17 01:19 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\he
2015-03-17 01:19 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\fr
2015-03-17 01:18 - 2015-02-12 20:42 - 00000000 ____D () C:\ProgramData\BlueStacks
2015-03-17 01:18 - 2015-01-13 00:23 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2015-03-17 01:18 - 2014-10-09 16:29 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2015-03-17 01:18 - 2014-10-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-03-17 01:18 - 2014-09-05 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-03-17 01:18 - 2014-09-05 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-03-17 01:18 - 2014-08-05 11:20 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-17 01:18 - 2014-06-30 20:10 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-03-17 01:18 - 2014-06-20 22:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico
2015-03-17 01:18 - 2014-06-20 22:49 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-17 01:18 - 2014-06-20 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-17 01:18 - 2014-05-20 06:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-03-17 01:18 - 2014-04-28 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2015-03-17 01:18 - 2014-03-16 00:59 - 00000000 ____D () C:\ProgramData\Applications
2015-03-17 01:18 - 2014-01-20 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative Professional
2015-03-17 01:18 - 2013-11-22 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZOOM
2015-03-17 01:18 - 2013-10-22 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-03-17 01:18 - 2013-10-22 19:09 - 00000000 ____D () C:\ProgramData\HP
2015-03-17 01:18 - 2013-10-18 17:45 - 00000000 ____D () C:\ProgramData\Oracle
2015-03-17 01:18 - 2013-10-18 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-03-17 01:18 - 2013-08-11 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-03-17 01:18 - 2013-04-02 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-17 01:18 - 2013-04-02 19:01 - 00000000 ____D () C:\ProgramData\Avira
2015-03-17 01:18 - 2012-11-26 22:45 - 00000000 ____D () C:\ProgramData\Syncrosoft
2015-03-17 01:18 - 2012-11-26 22:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser
2015-03-17 01:18 - 2012-11-26 22:44 - 00000000 ____D () C:\ProgramData\eLicenser
2015-03-17 01:18 - 2012-11-23 13:57 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-03-17 01:18 - 2012-11-23 13:56 - 00000000 ____D () C:\ProgramData\Apple
2015-03-17 01:18 - 2012-11-16 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2015-03-17 01:18 - 2012-11-16 14:33 - 00000000 ____D () C:\ProgramData\UDL
2015-03-17 01:18 - 2012-11-16 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2015-03-17 01:18 - 2012-11-15 19:22 - 00000000 ____D () C:\ProgramData\EPSON
2015-03-17 01:18 - 2012-10-27 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REAPER (x64)
2015-03-17 01:18 - 2012-10-02 17:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-17 01:18 - 2012-09-27 17:48 - 00000000 ____D () C:\ProgramData\m2backup
2015-03-17 01:18 - 2012-09-27 16:56 - 00000000 ____D () C:\ProgramData\mquadr.at
2015-03-17 01:18 - 2012-09-27 16:56 - 00000000 ____D () C:\ProgramData\m2portal
2015-03-17 01:18 - 2012-07-20 06:29 - 00000000 ____D () C:\ProgramData\tmp
2015-03-17 01:18 - 2012-07-20 06:29 - 00000000 ____D () C:\ProgramData\hps
2015-03-17 01:18 - 2012-05-13 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-17 01:18 - 2012-04-29 19:36 - 00000000 ____D () C:\ProgramData\Mozilla
2015-03-17 01:18 - 2012-01-30 15:01 - 00000000 ____D () C:\Users\Public\CyberLink
2015-03-17 01:18 - 2011-12-22 23:13 - 00000000 ____D () C:\ProgramData\Kodak
2015-03-17 01:18 - 2011-11-28 18:05 - 00000000 ____D () C:\ProgramData\CyberLink
2015-03-17 01:18 - 2011-10-29 10:00 - 00000000 ____D () C:\ProgramData\ATI
2015-03-17 01:18 - 2011-10-05 14:18 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-03-17 01:18 - 2011-10-05 13:53 - 00000000 ____D () C:\ProgramData\McAfee
2015-03-17 01:18 - 2011-10-04 19:04 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2015-03-17 01:18 - 2011-10-04 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
2015-03-17 01:18 - 2011-09-01 14:30 - 00000000 ____D () C:\ProgramData\Sun
2015-03-17 01:18 - 2011-08-16 22:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Web Camera
2015-03-17 01:18 - 2011-08-16 22:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2015-03-17 01:18 - 2011-07-25 11:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso
2015-03-17 01:18 - 2011-07-25 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeMedia
2015-03-17 01:18 - 2011-07-25 11:16 - 00000000 ____D () C:\Users\Public\Symantec
2015-03-17 01:18 - 2011-07-25 11:16 - 00000000 ____D () C:\ProgramData\Norton
2015-03-17 01:18 - 2011-07-25 11:14 - 00000000 ____D () C:\ProgramData\oem
2015-03-17 01:18 - 2011-07-25 11:14 - 00000000 ____D () C:\ProgramData\Adobe
2015-03-17 01:18 - 2011-07-25 11:10 - 00000000 ____D () C:\ProgramData\Nero
2015-03-17 01:18 - 2011-07-25 11:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-03-17 01:18 - 2011-07-25 11:04 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-03-17 01:18 - 2011-07-25 11:04 - 00000000 ____D () C:\Windows\eu
2015-03-17 01:18 - 2011-07-25 11:04 - 00000000 ____D () C:\Windows\ca
2015-03-17 01:18 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\fi
2015-03-17 01:18 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\es
2015-03-17 01:18 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\en
2015-03-17 01:18 - 2011-07-25 11:03 - 00000000 ____D () C:\Windows\el
2015-03-17 01:18 - 2011-07-25 11:02 - 00000000 ____D () C:\Windows\de
2015-03-17 01:18 - 2011-07-25 11:02 - 00000000 ____D () C:\Windows\da
2015-03-17 01:18 - 2011-07-25 11:02 - 00000000 ____D () C:\Windows\cs
2015-03-17 01:18 - 2011-07-25 11:02 - 00000000 ____D () C:\Windows\bg
2015-03-17 01:18 - 2011-07-25 11:02 - 00000000 ____D () C:\Windows\ar
2015-03-17 01:18 - 2011-07-25 10:56 - 00000000 ____D () C:\ProgramData\Packard Bell
2015-03-17 01:18 - 2011-07-25 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
2015-03-17 01:18 - 2011-07-25 10:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Social Networks
2015-03-17 01:18 - 2011-07-25 10:55 - 00000000 ____D () C:\ProgramData\Temp
2015-03-17 01:18 - 2011-07-25 10:55 - 00000000 ____D () C:\ProgramData\install_clap
2015-03-17 01:18 - 2011-07-25 10:55 - 00000000 ____D () C:\ProgramData\CLSK
2015-03-17 01:18 - 2011-07-25 10:54 - 00000000 ____D () C:\ProgramData\Skype
2015-03-17 01:18 - 2011-07-25 10:27 - 00000000 ____D () C:\ProgramData\WildTangent
2015-03-17 01:18 - 2011-07-25 10:18 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-03-17 01:18 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2
2015-03-17 01:18 - 2010-11-21 08:00 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-03-17 01:18 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-17 01:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-03-17 01:16 - 2014-05-20 06:24 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-03-17 01:16 - 2014-03-16 01:00 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2015-03-17 01:16 - 2013-11-22 19:45 - 00000000 ____D () C:\Program Files (x86)\ZOOM
2015-03-17 01:16 - 2012-11-16 14:34 - 00000000 ____D () C:\ProgramData\ABBYY
2015-03-17 01:15 - 2015-01-13 00:26 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-03-17 01:15 - 2014-10-07 18:40 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-03-17 01:15 - 2014-06-20 22:54 - 00000000 ____D () C:\Program Files (x86)\Tropico
2015-03-17 01:15 - 2014-06-20 22:52 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-03-17 01:15 - 2013-04-22 18:38 - 00000000 ____D () C:\Program Files (x86)\Winamp
2015-03-17 01:15 - 2013-03-05 08:05 - 00000000 ____D () C:\Program Files (x86)\WfK
2015-03-17 01:15 - 2012-11-26 22:44 - 00000000 ____D () C:\Program Files (x86)\Syncrosoft
2015-03-17 01:15 - 2012-03-07 17:50 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2015-03-17 01:15 - 2011-08-16 22:22 - 00000000 ____D () C:\Program Files (x86)\Video Web Camera
2015-03-17 01:15 - 2011-07-25 11:16 - 00000000 ____D () C:\Program Files (x86)\SymSilent
2015-03-17 01:15 - 2011-07-25 10:59 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-03-17 01:15 - 2011-07-25 10:55 - 00000000 ____D () C:\Program Files (x86)\Social Networks
2015-03-17 01:15 - 2011-07-25 10:27 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2015-03-17 01:15 - 2011-07-25 10:27 - 00000000 ____D () C:\Program Files (x86)\Packard Bell Games
2015-03-17 01:15 - 2011-07-25 10:25 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-03-17 01:14 - 2013-08-06 20:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-03-17 01:14 - 2012-04-29 19:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-17 01:14 - 2011-11-17 22:36 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2015-03-17 01:14 - 2011-11-17 22:35 - 00000000 ____D () C:\Program Files (x86)\OpenOffice
2015-03-17 01:14 - 2011-07-25 11:10 - 00000000 ____D () C:\Program Files (x86)\Nero
2015-03-17 01:14 - 2011-07-25 10:56 - 00000000 ____D () C:\Program Files (x86)\Packard Bell
2015-03-17 01:14 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-17 01:13 - 2014-09-05 13:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2015-03-17 01:13 - 2014-09-05 13:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2015-03-17 01:13 - 2014-09-05 13:55 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2015-03-17 01:13 - 2014-09-05 13:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-03-17 01:13 - 2014-06-30 20:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-03-17 01:13 - 2014-05-20 06:24 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-03-17 01:13 - 2012-09-04 17:03 - 00000000 ____D () C:\Program Files (x86)\Mobile Partner
2015-03-17 01:13 - 2012-05-13 11:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-03-17 01:13 - 2011-12-22 23:15 - 00000000 ____D () C:\Program Files (x86)\Kodak
2015-03-17 01:13 - 2011-10-04 16:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-03-17 01:13 - 2011-09-01 14:29 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-17 01:13 - 2011-08-16 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-03-17 01:13 - 2011-08-16 22:07 - 00000000 ____D () C:\Program Files (x86)\Launch Manager
2015-03-17 01:13 - 2011-07-25 11:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-03-17 01:12 - 2014-06-20 22:52 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2015-03-17 01:12 - 2013-10-22 19:09 - 00000000 ____D () C:\Program Files (x86)\HP
2015-03-17 01:12 - 2012-11-26 22:44 - 00000000 ____D () C:\Program Files (x86)\eLicenser
2015-03-17 01:12 - 2012-11-15 19:26 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
2015-03-17 01:12 - 2011-10-13 19:00 - 00000000 ____D () C:\Program Files (x86)\Ganymede
2015-03-17 01:12 - 2011-07-25 11:18 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2015-03-17 01:12 - 2011-07-25 10:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-17 01:12 - 2011-07-25 10:18 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-17 01:11 - 2014-01-20 19:07 - 00000000 ____D () C:\Program Files (x86)\Creative Professional
2015-03-17 01:11 - 2014-01-20 19:07 - 00000000 ____D () C:\Program Files (x86)\Creative
2015-03-17 01:11 - 2012-01-12 20:33 - 00000000 ____D () C:\Program Files (x86)\Conduit
2015-03-17 01:07 - 2014-09-11 21:42 - 00000000 ____D () C:\Program Files (x86)\Audacity
2015-03-17 01:07 - 2013-04-02 19:01 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-17 01:07 - 2012-11-23 13:56 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-03-17 01:07 - 2012-11-23 13:56 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-03-17 01:07 - 2011-08-16 22:01 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2015-03-17 01:07 - 2011-08-16 22:00 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-03-17 01:06 - 2011-07-25 11:14 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-17 01:04 - 2015-01-13 00:23 - 00000000 ____D () C:\Program Files\PDFCreator
2015-03-17 01:04 - 2014-06-20 22:28 - 00000000 ____D () C:\Program Files\WinRAR
2015-03-17 01:04 - 2014-05-20 06:24 - 00000000 ____D () C:\Program Files\iTunes
2015-03-17 01:04 - 2014-05-20 06:24 - 00000000 ____D () C:\Program Files\iPod
2015-03-17 01:04 - 2014-03-04 23:56 - 00000000 ____D () C:\Program Files\lamedropXPd3.1-3.99.5-64-SoX
2015-03-17 01:04 - 2013-11-22 19:45 - 00000000 ____D () C:\Program Files\ZOOM
2015-03-17 01:04 - 2013-10-27 19:57 - 00000000 ____D () C:\Program Files\OpenOfficeI
2015-03-17 01:04 - 2012-11-26 22:56 - 00000000 ____D () C:\Program Files\Steinberg
2015-03-17 01:04 - 2012-11-16 14:34 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2015-03-17 01:04 - 2012-10-27 21:52 - 00000000 ____D () C:\Program Files\REAPER (x64)
2015-03-17 01:04 - 2012-05-13 11:05 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-03-17 01:04 - 2011-10-04 16:23 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-03-17 01:04 - 2011-08-16 22:08 - 00000000 ____D () C:\Program Files\Intel
2015-03-17 01:04 - 2011-07-25 10:58 - 00000000 ____D () C:\Program Files\Windows Live
2015-03-17 01:04 - 2011-07-25 10:56 - 00000000 ____D () C:\Program Files\Packard Bell
2015-03-17 01:03 - 2013-10-22 19:09 - 00000000 ____D () C:\Program Files\HP
2015-03-17 01:03 - 2012-11-26 23:01 - 00000000 ____D () C:\Program Files\Common Files\Steinberg
2015-03-17 01:03 - 2012-11-23 13:56 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-03-17 01:03 - 2012-11-23 13:56 - 00000000 ____D () C:\Program Files\Bonjour
2015-03-17 01:03 - 2012-11-15 19:22 - 00000000 ____D () C:\Program Files\Common Files\EPSON
2015-03-17 01:03 - 2012-10-27 21:52 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2015-03-17 01:03 - 2011-08-16 22:01 - 00000000 ____D () C:\Program Files\Common Files\Intel
2015-03-17 01:03 - 2011-08-16 22:00 - 00000000 ____D () C:\Program Files\ATI
2015-03-17 01:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-03-17 01:00 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-17 00:55 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2015-03-17 00:55 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2015-03-17 00:21 - 2011-08-16 22:01 - 01322626 _____ () C:\Windows\WindowsUpdate (1).log
2015-03-15 23:58 - 2013-10-24 15:59 - 00123392 ___SH () C:\Users\mmmurpark\Documents\Thumbs.db
2015-03-13 12:06 - 2011-11-06 22:51 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-03-12 20:58 - 2014-06-30 20:10 - 00002202 _____ () C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-12 07:02 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-12 06:55 - 2013-08-06 23:40 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 21:06 - 2013-05-07 17:30 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-11 21:06 - 2013-04-02 19:01 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-11 21:06 - 2013-04-02 19:01 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-04 10:19 - 2013-01-13 21:55 - 00329216 ___SH () C:\Users\mmmurpark\Desktop\Thumbs.db
2015-03-01 22:11 - 2011-10-10 14:38 - 00000000 ____D () C:\Eigene Dateien

Some content of TEMP:
====================
C:\Users\mmmurpark\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-17 13:25

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by mmmurpark at 2015-03-17 18:01:53
Running from C:\Users\mmmurpark\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.1.650 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 9 (HKLM-x32\...\PremElem90) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
ATI Catalyst Install Manager (HKLM\...\{E7F13A64-2E17-6800-06A9-D898C728A755}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.650 - Avira)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
BitTorrent (HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\BitTorrent) (Version: 7.9.2.31744 - BitTorrent Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DJ3520FWUpdateAlert (x32 Version: 2.00.0000 - HP) Hidden
Dropbox (HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\Dropbox) (Version: 3.2.6 - Dropbox, Inc.)
Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Elements STI Installer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version:  - Steinberg Media Technologies GmbH)
ESSPDock (x32 Version: 6.03.0001.0004 - Ihr Firmenname) Hidden
ETDWare PS/2-X64 8.0.6.0_WHQL (HKLM\...\Elantech) (Version: 8.0.6.0 - ELAN Microelectronic Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GameDesire-Pool & Snooker (HKLM-x32\...\GameDesire-Pool & Snooker) (Version:  - )
HomeMedia (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.8920 - CyberLink Corporation)
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Hilfe (HKLM-x32\...\{6B953497-169C-4929-9AA9-A9F510347468}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Packard Bell)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
iTunes (HKLM\...\{1CF5754A-545B-4360-BFDE-2847BC728DFC}) (Version: 11.2.0.115 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kodak EasyShare Software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Packard Bell)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{26784146-6E05-3FF9-9335-786C7C0FB5BE}) (Version:  - )
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 17.0.8 (x86 de)) (Version: 17.0.8 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.11000.8.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{68AFA3A7-9265-4ABD-994A-ACA413E3715C}) (Version: 10.6.10300 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.10900.31.0 - Nero AG)
netbrdg (x32 Version: 6.03.0001.0002 - EASTMAN KODAK Company) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Packard Bell Games (HKLM-x32\...\WildTangent packardbell Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.04.3502 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.1025.2010 - Packard Bell )
Packard Bell Social Networks (HKLM-x32\...\InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}) (Version: 3.0.3106 - CyberLink Corp.)
Packard Bell Social Networks (x32 Version: 3.0.3106 - CyberLink Corp.) Hidden
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Packard Bell)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
R16_R24 Driver (HKLM\...\{19CF1A77-C522-4082-8A2B-A9952EE9E372}) (Version: 1.13.0000 - ZOOM)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version:  - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SFR (x32 Version: 6.02.0001.0001 - Eastman Kodak Company) Hidden
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Steinberg Cubase LE AI Elements 6 64bit (HKLM\...\{8EEEB23E-A3EB-44A4-AEE9-D2FD6F96E4A0}) (Version: 6.0.3 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 1.5.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content for Cubase LE AI Elements (HKLM-x32\...\{CF45002F-2205-4116-BB51-2D015F436CAC}) (Version: 1.5.2.000 - Steinberg Media Technologies GmbH)
Studie zur Verbesserung von HP Deskjet 3520 series Produkten (HKLM\...\{A5BB6A58-BC1A-48A7-BB19-1768A80CF9C9}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
Tropico (HKLM-x32\...\{818FB39B-1A57-4F1B-A54D-391C33D6C586}) (Version:  - )
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Video Web Camera (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Video Web Camera (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
VLC media player 2.0.7 (HKLM-x32\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.02.3503 - Packard Bell)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Zipeg (HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\...\Zipeg) (Version: 2.9.3.1316 - hxxp://zipeg.com)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\mmmurpark\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4276475938-3837995224-2700496704-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mmmurpark\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

17-03-2015 06:12:47 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0320B9DC-1004-423C-B96C-A22A55467142} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {08CF6A6F-6CF7-4B17-98DF-39036530E554} - System32\Tasks\{0D8F94CA-7E11-472A-8EE9-FC8A8D926167} => pcalua.exe -a C:\Users\mmmurpark\Downloads\streamripper-windows-installer-1.64.6(1).exe -d C:\Users\mmmurpark\Downloads
Task: {150CEB47-3E3D-40AC-B68D-BDF1E8A3001C} - System32\Tasks\{0B7431FE-B4B4-471C-BFF0-A01353461F6A} => pcalua.exe -a "C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe" -d "C:\Eigene Dateien\Peter\Schule\Mathematik\4. Klassen" -c -o "C:\Eigene Dateien\Peter\Schule\Mathematik\4. Klassen\SLF-G.odt"
Task: {2C6DF834-CA4E-4AC4-8F95-0EA0E4D6CEA4} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {43C5D658-5B26-4D2A-B770-63A1C02F3523} - System32\Tasks\Musikwecker => C:\Program Files\Windows Media Player\wmplayer.exe [2010-11-21] (Microsoft Corporation)
Task: {4CBCFB91-1206-4F84-B46E-DE391327D07E} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-07-05] (Nero AG)
Task: {4FF64161-236D-4C0A-B3AE-13ECA7541F6D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {5156B77E-455B-43D2-95D7-E716FA6D9C58} - System32\Tasks\{9DE350B8-BAAF-423D-BD9D-D6A0187793D8} => pcalua.exe -a C:\Users\mmmurpark\Downloads\MASetup.exe -d C:\Users\mmmurpark\Downloads
Task: {53AAA10A-75A1-4A4D-9434-5A1FC58965AE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: {53B30689-9BB7-40D8-8926-29359C2E85EA} - System32\Tasks\{A2258456-6990-4BA2-871C-B388DFD6D57E} => pcalua.exe -a C:\Users\mmmurpark\Desktop\streamripper-windows-installer-1.64.6.exe -d C:\Users\mmmurpark\Desktop
Task: {66C8DCF6-B68B-4443-9E34-801D056FC17B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {83B4331B-DA13-4610-B615-57C5A12AFFF1} - System32\Tasks\{E91CA1A8-E1ED-4F2E-92E8-444C7DA4BEDC} => pcalua.exe -a "E:\Mobile Partner\Setup.exe" -d "E:\Mobile Partner"
Task: {995D90E9-CA0F-4139-B256-89965419F58E} - System32\Tasks\AdobeAAMUpdater-1.0-LAPTOP-mmmurpark => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated)
Task: {9ECEA05D-DB41-474C-A3EA-2FCD71DCB0A5} - \avayvaxvaa No Task File <==== ATTENTION
Task: {A8C947F3-6654-4E67-87E8-E6059A991CB7} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)
Task: {C0B63EBA-BB74-4053-AECD-5F436FED351B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20] (Adobe Systems Incorporated)
Task: {D6AD5237-A8C3-4290-A433-1DCD93B4262B} - System32\Tasks\Musikwecker2 => C:\Program Files\Windows Media Player\wmplayer.exe [2010-11-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-04 23:17 - 2013-09-04 23:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2011-07-25 11:00 - 2011-04-15 03:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-03-14 13:21 - 2011-03-14 13:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-24 22:50 - 2011-05-24 22:50 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-06 00:52 - 2014-02-06 00:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 00:52 - 2014-02-06 00:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-04 23:14 - 2013-09-04 23:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-03-17 07:25 - 2015-03-17 07:25 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f3fe53ec4c0c7aa33e716ad6727579a2\IsdiInterop.ni.dll
2011-07-25 10:18 - 2011-01-13 01:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4276475938-3837995224-2700496704-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\mmmurpark\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-4276475938-3837995224-2700496704-500 - Administrator - Disabled)
Gast (S-1-5-21-4276475938-3837995224-2700496704-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4276475938-3837995224-2700496704-1006 - Limited - Enabled)
mmmurpark (S-1-5-21-4276475938-3837995224-2700496704-1000 - Administrator - Enabled) => C:\Users\mmmurpark

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/17/2015 05:56:55 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13541277

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13541277

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13531277

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13531277

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30561

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30561

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (03/17/2015 05:34:15 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (03/17/2015 05:34:04 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Avira.OE.ServiceHost erreicht.

Error: (03/17/2015 01:27:11 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (03/17/2015 01:00:18 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (03/17/2015 11:43:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Client Virtualization Handler" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/17/2015 11:43:05 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Client Virtualization Handler erreicht.

Error: (03/17/2015 11:42:29 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (03/17/2015 11:41:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Search Protect Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%216

Error: (03/17/2015 11:39:46 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst sftlist erreicht.

Error: (03/17/2015 11:38:55 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}


Microsoft Office Sessions:
=========================
Error: (03/17/2015 05:56:55 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\mmmurpark\Downloads\SoftonicDownloader_fuer_artistic-font-collection.exe

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13541277

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13541277

Error: (03/17/2015 05:34:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13531277

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13531277

Error: (03/17/2015 05:34:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30561

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30561

Error: (03/17/2015 01:49:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 46%
Total physical RAM: 3947.86 MB
Available physical RAM: 2100.23 MB
Total Pagefile: 7893.92 MB
Available Pagefile: 5485.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:445.66 GB) (Free:223.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 7340238A)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=445.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-03-17 18:17:12
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD50 rev.01.0 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\MMMURP~1\AppData\Local\Temp\uxtdapow.sys


---- User code sections - GMER 2.1 ----

?        C:\Windows\system32\mssprxy.dll [2772] entry point in ".rdata" section                                                                                                                             00000000695d71e6
.text    C:\Program Files (x86)\Launch Manager\LManager.exe[2924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                   0000000075f11465 2 bytes [F1, 75]
.text    C:\Program Files (x86)\Launch Manager\LManager.exe[2924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                  0000000075f114bb 2 bytes [F1, 75]
.text    ...                                                                                                                                                                                                * 2
---- Processes - GMER 2.1 ----

Library  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{09156C72-60D3-4EDF-A1CA-D4C4CE067478}\offreg.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [3888](2015-03-16 20:38:31)  000007fef96d0000

---- EOF - GMER 2.1 ----
         

Beginne mit der Suche in 'C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe'
C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe
  [FUND]      Enthält Muster der Software PUA/SearchProtect.228624

Beginne mit der Desinfektion:
[ERROR] RepairMalware: Not able to Repair Malware PUA/SearchProtect.228624
[INFO] RepairMalware: Disinfection of malware PUA/SearchProtect.228624 needs the rescue cd to complete
C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe
  [FUND]      Enthält Muster der Software PUA/SearchProtect.228624
  [HINWEIS]   Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
  [HINWEIS]   Die Datei existiert nicht!