Ich habe auch das Problem mit trackid=sp-006

der_zap01 · 21.03.2015, 17:43

Hallo,
ich habe auch das Problem, dass (nur beim Chrome Browser) bei einer GoogleSuche immer trackid=sp-006 abngehängt wird.
Hier das Addition.log von FRST:FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Pit at 2015-03-21 17:28:40
Running from E:\E_Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (SEnabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. 

The adware programs should be uninstalled manually.)

ACDSee 9 Foto-Manager (HKLM-x32\...\{7AE25201-3E12-4FA2-9E65-67CD475D9263}) (Version: 

9.0.55 - ACD Systems Ltd.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 

17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - 

Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) 

(Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5DDB9EF7-1BC0-C9C1-9829-6B9CF68AC357}) (Version: 

8.0.903.0 - Advanced Micro Devices, Inc.)
Any Video Converter 5.7.6 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-

Converter.com)
Apache Tomcat 8.0.3 (HKLM\...\nbi-tomcat-8.0.3.0.0) (Version:  - )
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 

2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 

2.1.3.127 - Apple Inc.)
ArchiCrypt Live Version 7.0.6.10964 (HKLM\...\ArchiCrypt Live 7_is1) (Version: 7.0.6.10964 

- Softwareentwicklung Patric Remus - ArchiCrypt)
Ashampoo Burning Studio 14 v.14.1.0 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}

_is1) (Version: 14.1.0 - Ashampoo GmbH & Co. KG)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-

1A1A7857D33D}) (Version: 1.16.10.0 - Asmedia Technology)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM 

Development Team)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-

0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink PowerDirector 13 (HKLM-x32\...\{BA385AFC-00B1-417C-8C20-74B996EF3AF0}) (Version: 

13.0.2104.0 - CyberLink Corp.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.44 - DivX, LLC)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
Dropbox (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Dropbox) (Version: 3.2.9 - 

Dropbox, Inc.)
DVBViewer TE2 (HKLM-x32\...\DVBViewer TE2_is1) (Version:  - CM&V)
DVD-Cover v.1.5.1.6 (HKLM-x32\...\ST6UNST #1) (Version:  - )
EMDB 2.13 (HKLM-x32\...\EMDB_is1) (Version:  - Wicked & Wild Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FLAC To MP3 V4.0.5 (HKLM-x32\...\FLAC To MP3_is1) (Version:  - FLAC To MP3, Inc.)
Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) 

(Version: 4.1.5 - Ellora Assets Corporation)
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 

4.00.000 - Runtime Software)
GlassFish Server Open Source Edition 4.0 (HKLM\...\nbi-glassfish-mod-4.0.0.89.0) (Version:  

- )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Drive (HKLM-x32\...\{6C36881B-0E51-4231-9D02-BF2149664D34}) (Version: 1.20.8672.3137 

- Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
HiDrive (HKLM-x32\...\{02F3A598-7398-4047-A1D3-44B08AD42D8C}) (Version: 3.1.7.0 - STRATO 

AG)
HP Support Solutions Framework (HKLM-x32\...\{69FD2930-C361-47F6-822E-71B021526778}) 

(Version: 11.50.0015 - Hewlett-Packard Company)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.2.6.2 - IObit)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - 

Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-

00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
K-Lite Mega Codec Pack 10.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.5 - )
MAGIX Common Components 1 (HKLM-x32\...\{7A8B2204-574B-42A2-A3DC-52AE142D197F}) (Version: 

1.2.0.0 - MAGIX AG)
MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Movie Edit Pro 2014 Plus (HKLM-x32\...\MAGIX Movie Edit Pro 2014 Plus_is1) (Version:  

- )
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{66BA340C-14B0-49EF-A9DB-C9D7C0D3E340}) (Version: 

7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
MainConcept DTV Decoder Pro (HKLM-x32\...\{793FCE60-DE5E-4977-A942-A7B69A45B17D}) (Version: 

1.5.0.2 - MainConcept GmbH)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) 

(Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 

1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) 

(Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-

0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) 

(Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 

15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...

\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 

5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-

51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-

2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-

908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-

377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-

37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-

3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-

3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-

39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-

2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-

ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-

8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-

321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-

413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-

48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual 

Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...

\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 

10.0.50903 - Microsoft Corporation)
Mozilla Firefox 36.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.3 (x86 de)) (Version: 

36.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - 

Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 

4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) 

(Version: 4.30.2117.0 - Microsoft Corporation)
muvee Reveal 11 (HKLM-x32\...\{92150CEE-F017-9FF5-17C4-B1CEB1048A3D}) (Version: 

11.0.0.26762 - muvee Technologies Pte Ltd)
muvee Reveal Runtime (HKLM-x32\...\{89018418-6136-4BA8-BAF9-FC0D3C4D4DDA}) (Version: 

11.0.0.26762 - muvee Technologies Pte Ltd)
NAVIGON Fresh 3.5.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
NetBeans IDE 8.0 (HKLM\...\nbi-nb-base-8.0.0.0.201403101706) (Version: 8.0 - NetBeans.org)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - 

NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) 

(Version: 1.10.8 - NVIDIA Corporation)
O&O DiskRecovery (HKLM\...\{663A0073-D1FD-42B8-899F-AA5FA8359704}) (Version: 8.0.335 - O&O 

Software GmbH)
Ontrack EasyRecovery Professional (HKLM-x32\...\InstallShield_{268723B7-A994-4286-9F85-

B974D5CAFC7B}) (Version: 6.22.01 - Kroll Ontrack Inc.)
Ontrack EasyRecovery Professional (x32 Version: 6.22.01 - Kroll Ontrack Inc.) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 

15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - 

pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - 

pdfforge)
Prerequisite installer (x32 Version: 12.0.0005 - Nero AG) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - 

Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) 

(Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) 

(Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
RoboForm 7-9-6-6 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-6-6 - Siber Systems)
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 

3.1.60 - Kivuto Solutions Inc.)
skillpipe Reader (HKLM-x32\...\{31282BD3-48FC-45A1-8826-9744FE55C046}) (Version: 2.1.132.0 

- arvato)
Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.12.201408250841 - 

Sony Mobile Communications AB)
Sony PC Companion 2.10.251 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 

2.10.251 - Sony)
StarMoney (x32 Version: 4.0.4.16 - StarFinanz) Hidden
StarMoney 9.0 S-Edition (HKLM-x32\...\{442138A9-4D2A-4AFC-9D88-B9EA7A2ACD22}) (Version: 9.0 

- Star Finanz GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
TechniSat DVB-PC TV Star (HKLM-x32\...\{D032A7F0-8B5C-4603-8B46-235025D5F9C1}) (Version: 

4.3.3 - TechniSat)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-

0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407

-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-

0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - 

Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-

0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Winamp 

Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinHTTrack Website Copier 3.48-17 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 

3.48.17 - HTTrack)
Winmail Opener 1.4 (HKLM-x32\...\Winmail Opener) (Version: 1.4 - Eolsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WizMouse v1.7.0.3 (HKLM-x32\...\WizMouse_is1) (Version:  - Antibody Software)
Wondershare Video Converter Ultimate(Build 7.4.1.1) (HKLM-x32\...\Wondershare Video 

Converter Ultimate_is1) (Version: 7.4.1.1 - Wondershare Software)
Wunderlist (HKLM-x32\...\{05005782-A2CD-4EF9-B838-C3B00FED2412}) (Version: 3.2.1.1 - 6 

Wunderkinder GmbH)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion 

Limited)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual 

file will not be moved.)

CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{005A3A96-

BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{5AB7172C-

9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{A0396A93-

DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{A78ED123-

AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{BBACC218-

34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{CB3D0F55-

BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{ECD97DE5-

3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{F241C880-

6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{F8071786-

1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft

\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314ED9-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDA-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDB-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDC-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDD-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDE-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDF-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EE0-

A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin

\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

21-03-2015 17:12:18 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated 

file could be listed separately to be moved.)

Task: {258345BC-39D4-4FFF-B736-5B95848DA521} - System32\Tasks\Open URL by RoboForm => 

Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?

aaa=KICMKMLMMMJJJMIMIMKJCNGMOJJJHMCNLMKJJJHMCNNJIMLJKMCNLJLMKJKMIMHMLJHMNMIMNJJJJNJICMIMCNG

MCNJMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMLMFMOMNMLJPMOMFMPMJNHICMOMNMLJPMOMJNBJ

CMPKGJLIJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {2C1E489F-59F6-4698-B2A0-ED790F659D74} - System32\Tasks\GoogleUpdateTaskMachineCore 

=> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)
Task: {328F9573-59E2-4744-8358-A25D4A402201} - System32\Tasks\Adobe Flash Player Updater => 

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-21] (Adobe Systems 

Incorporated)
Task: {32DD1A1A-9961-4B92-A7D6-624747A76FD8} - System32\Tasks\Driver Booster SkipUAC (Pit) 

=> C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-12-17] (IObit)
Task: {4DF4AC7A-49F7-43E1-AD24-CE3556C74133} - System32\Tasks

\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller

\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {51DBC17B-B40D-43C3-B095-F0FBA77BD9B5} - System32\Tasks\klcp_update => C:\Program 

Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-01-13] ()
Task: {61121E06-96FA-4BE1-95C7-0D2FDAEA65F5} - System32\Tasks\Uninstaller_SkipUac_Pit => 

C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {64851611-882B-47E6-86A0-7E9390F7C02A} - System32\Tasks\Microsoft\Office

\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe 

[2014-01-21] (Microsoft Corporation)
Task: {6BD9F6B6-4085-47F4-817C-747EC2532F92} - System32\Tasks\Apple\AppleSoftwareUpdate => 

C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {780D1870-25F2-4A3B-BBAF-AA9DCFC22E99} - System32\Tasks\CCleanerSkipUAC => C:\Program 

Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {7DA8561C-42E3-4ABB-AE26-7F071D5AA0C9} - System32\Tasks\Microsoft Office 15 Sync 

Maintenance for Win7_Turbo-Pit Win7_Turbo => C:\Program Files (x86)\Microsoft Office

\Office15\MsoSync.exe [2015-01-21] (Microsoft Corporation)
Task: {842021E7-12A6-4DB9-923A-1B70BA587F87} - System32\Tasks\Run RoboForm TaskBar Icon => 

C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-04-09] (Siber 

Systems)
Task: {8E764516-1687-4ACA-B674-E3B4DC9E7C07} - System32\Tasks\avastBCLRestartS-1-5-21-

669018618-3909585642-2056782394-1000 => Chrome.exe 
Task: {90978530-A97C-4408-9E46-891C02F136A1} - System32\Tasks\Microsoft\Office

\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-

01-21] (Microsoft Corporation)
Task: {94B9A159-4D93-4518-ACED-4097C4DE9D08} - System32\Tasks

\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {963921E4-51A1-4840-A520-E393F0027EF4} - System32\Tasks\avast! Emergency Update => 

C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-22] (AVAST Software)
Task: {ABFB0974-6F7E-491B-B651-99D19A4E5C76} - System32\Tasks\ASUS\RunDAOD => C:\Windows

\DAODx.exe [2009-03-30] ()
Task: {D961259F-1F71-4D0A-8E37-6F64FD86712C} - System32\Tasks\Adobe Acrobat Update Task => 

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems 

Incorporated)
Task: {E7A4449E-5377-4A2E-AA26-9A836B221199} - System32\Tasks\GoogleUpdateTaskMachineUA => 

C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)
Task: {EA5D879C-E1D1-4558-9357-9ADDBF65AE87} - System32\Tasks\{763F1876-53E5-4374-AFA6-

0D0133B0E190} => pcalua.exe -a E:\Warez\extracted

\Nero.2015.Platinum.v16.0.03000.Final.Multilanguage-RBC\Nero2015_setup-16.0.03000.exe -d 

E:\Warez\extracted\Nero.2015.Platinum.v16.0.03000.Final.Multilanguage-RBC
Task: {F01A0B0A-0715-4103-8A29-77ACD7680D34} - System32\Tasks\Microsoft\Office\Office 15 

Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared

\Office15\OLicenseHeartbeat.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed

\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google

\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google

\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-04-09 16:53 - 2013-01-31 10:25 - 00087328 _____ () C:\Program Files\NVIDIA 

Corporation\Display\NvSmartMax64.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla 

FTP Client\fzshellext_64.dll
2009-03-30 07:32 - 2009-03-30 07:32 - 00032768 ____R () C:\Windows\DAODx.exe
2015-01-05 22:50 - 2013-09-22 10:27 - 00119000 _____ () C:\Program Files (x86)\WizMouse

\WizMouse.exe
2014-04-24 08:44 - 2014-06-23 08:07 - 00113376 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\PCCompanionInfo.exe
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files (x86)\DivX\DivX 

Update\DivXUpdate.exe
2015-02-19 22:40 - 2015-02-19 22:40 - 00057344 _____ () C:\Program Files\CCleaner\lang

\lang-1031.dll
2015-03-21 17:27 - 2015-03-19 22:36 - 10031184 _____ () C:\Program Files (x86)\Google

\Update\Install\{416F469A-5D1E-4B40-8088-

1992FF0E5CF2}\41.0.2272.101_40.0.2214.115_chrome_updater.exe
2015-03-09 22:07 - 2015-03-09 22:07 - 02920960 _____ () C:\Program Files\AVAST Software

\Avast\defs\15030901\algo.dll
2015-03-21 16:31 - 2015-03-21 16:31 - 02922496 _____ () C:\Program Files\AVAST Software

\Avast\defs\15032100\algo.dll
2007-10-22 15:34 - 2007-10-22 15:34 - 00649728 _____ () C:\Program Files (x86)\Gene6 FTP 

Server\libeay32.DLL
2007-10-22 15:35 - 2007-10-22 15:35 - 00232448 _____ () C:\Program Files (x86)\Gene6 FTP 

Server\libssl32.DLL
2014-08-07 01:22 - 2011-01-13 09:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 

9.0 S-Edition\ouservice\PATCHW32.dll
2014-04-24 08:44 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\TMonitorAPI.dll
2014-04-24 08:44 - 2014-12-04 14:18 - 00241152 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\MExplorer.dll
2013-06-11 09:31 - 2013-06-11 09:31 - 00090112 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\CalEngine.dll
2012-04-04 14:33 - 2012-04-04 14:33 - 00139776 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\CAgdLNotes.dll
2013-01-08 17:02 - 2013-01-08 17:02 - 00163840 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\CAgdOutlook.dll
2012-07-26 11:51 - 2012-07-26 11:51 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\VistaCalendar.dll
2014-04-24 08:44 - 2010-01-11 15:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\VObject.dll
2011-01-05 15:01 - 2011-01-05 15:01 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\PimNotes.dll
2011-07-07 14:54 - 2011-07-07 14:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\Report.dll
2014-04-24 08:44 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\sqlite3.dll
2014-09-15 15:20 - 2014-09-15 15:20 - 00645120 _____ () C:\Program Files (x86)\Sony\Sony PC 

Companion\PhoneUpdate.dll
2014-04-09 20:43 - 2010-03-30 12:25 - 00120320 _____ () C:\Program Files (x86)\TechniSat 

DVB\bin\LIBBZ2.dll
2014-11-22 13:39 - 2014-11-22 13:39 - 38562088 _____ () C:\Program Files\AVAST Software

\Avast\libcef.dll
2014-10-07 18:08 - 2014-08-05 09:22 - 01489408 _____ () C:\Program Files (x86)\Common 

Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-10-07 18:08 - 2014-05-19 16:19 - 00137728 _____ () C:\Program Files (x86)\Common 

Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX 

Update\DivXUpdateCheck.dll
2015-03-21 16:49 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit 

Uninstaller\madExcept_.bpl
2015-03-21 16:49 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit 

Uninstaller\madBasic_.bpl
2015-03-21 16:49 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit 

Uninstaller\madDisAsm_.bpl
2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () C:\Users\Pit\AppData\Roaming

\Dropbox\bin\libGLESv2.dll
2015-03-21 16:54 - 2015-03-21 16:54 - 00043008 _____ () c:\users\pit\appdata\local\temp

\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8v5oax.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () C:\Users\Pit\AppData\Roaming

\Dropbox\bin\libEGL.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () C:\Users\Pit\AppData\Roaming

\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () C:\Users\Pit\AppData\Roaming

\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla 

FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla 

FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla 

FTP Client\libstdc++-6.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 01117512 _____ () C:\Program Files (x86)\Google

\Chrome\Application\40.0.2214.115\libglesv2.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 00211272 _____ () C:\Program Files (x86)\Google

\Chrome\Application\40.0.2214.115\libegl.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 09171272 _____ () C:\Program Files (x86)\Google

\Chrome\Application\40.0.2214.115\pdf.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 14965064 _____ () C:\Program Files (x86)\Google

\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00098816 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32api.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00110080 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\pywintypes27.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00364544 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\pythoncom27.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00045568 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_socket.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01161216 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_ssl.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00320512 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32com.shell.shell.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00713216 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_hashlib.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01175040 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._core_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00805888 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._gdi_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00811008 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._windows_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01062400 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._controls_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00735232 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._misc_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00682496 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\pysqlite2._sqlite.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00128512 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_elementtree.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00127488 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\pyexpat.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00087552 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_ctypes.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00119808 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32file.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00108544 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32security.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00007168 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\hashobjs_ext.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00167936 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32gui.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00018432 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32event.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00038912 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32inet.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00011264 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32crypt.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00070656 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._html2.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00027136 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_multiprocessing.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00020480 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\_yappi.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00035840 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32process.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00686080 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\unicodedata.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00122368 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._wizard.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00024064 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32pipe.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00010240 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\select.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00025600 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32pdh.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00525640 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\windows._lib_cacheinvalidation.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00017408 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32profile.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00022528 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\win32ts.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00078336 _____ () C:\Users\Pit\AppData\Local\Temp

\_MEI67122\wx._animate.pyd

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Microsoft Toolkit 2.5.2:com.dropbox.attributes
AlternateDataStreams: C:\ProgramData\TEMP:B755D674
AlternateDataStreams: C:\ProgramData\TEMP:D78D6FF7

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The 

"AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries 

will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-669018618-3909585642-2056782394-1000\Control Panel\Desktop\\Wallpaper -> C:

\Users\Pit\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-669018618-3909585642-2056782394-500 - Administrator - Disabled)
Gast (S-1-5-21-669018618-3909585642-2056782394-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-669018618-3909585642-2056782394-1003 - Limited - Enabled)
Pit (S-1-5-21-669018618-3909585642-2056782394-1000 - Administrator - Enabled) => C:\Users

\Pit
UpdatusUser (S-1-5-21-669018618-3909585642-2056782394-1001 - Limited - Enabled) => C:

\Users\UpdatusUser
VPN Benutzer (S-1-5-21-669018618-3909585642-2056782394-1005 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this 

device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the 

troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/08/2015 11:47:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS

\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests

\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:

\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/08/2015 01:37:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 

0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x199c
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (03/08/2015 00:37:21 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS

\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests

\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:

\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/04/2015 01:20:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS

\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests

\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:

\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit

\AppData\Local\Temp\HiDriveOverlayIcon2.ico" zugreifen, da sie von einem anderen Prozess 

verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.File.InternalDelete(String path, Boolean checkHost)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: An exception occured when trying to create the overlay 

icon.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit

\AppData\Local\Temp\HiDriveOverlayIcon1.ico" zugreifen, da sie von einem anderen Prozess 

verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, 

SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, 

Boolean checkHost)
   bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare 

share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   bei System.IO.FileStream..ctor(String path, FileMode mode)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.


System errors:
=============
Error: (03/21/2015 05:15:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Advanced SystemCare Service 8" wurde unerwartet beendet. Dies ist 

bereits 1 Mal passiert.

Error: (03/21/2015 04:49:29 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Advanced SystemCare Service 8" ist als interaktiver Dienst 

gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht 

möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (03/21/2015 04:32:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers 

nicht gestartet: 
%%1069

Error: (03/21/2015 04:32:48 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem 

aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der 

Microsoft Management Console (MMC).

Error: (03/21/2015 04:30:42 PM) (Source: Service Control Manager) (EventID: 7002) (User: )
Description: Der Dienst "MLPTDR_B" ist von der Gruppe "Parallel arbitrator" abhängig. Kein 

Mitglied dieser Gruppe wurde jedoch gestartet.

Error: (03/08/2015 02:07:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers 

nicht gestartet: 
%%1069

Error: (03/08/2015 02:07:33 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem 

aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der 

Microsoft Management Console (MMC).

Error: (03/08/2015 02:05:27 PM) (Source: Service Control Manager) (EventID: 7002) (User: )
Description: Der Dienst "MLPTDR_B" ist von der Gruppe "Parallel arbitrator" abhängig. Kein 

Mitglied dieser Gruppe wurde jedoch gestartet.

Error: (03/08/2015 00:20:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers 

nicht gestartet: 
%%1069

Error: (03/08/2015 00:20:36 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem 

aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der 

Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (03/08/2015 11:47:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS

\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files 

(x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/08/2015 01:37:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: 

vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d199c01d0599c9a

85aa85E:\Program Files (x86)\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dlle6f2715a-c58f-11e4-

82e4-00d0d70c0946

Error: (03/08/2015 00:37:21 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS

\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files 

(x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/04/2015 01:20:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS

\manifests\x86_microsoft.windows.common-

controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files 

(x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit

\AppData\Local\Temp\HiDriveOverlayIcon2.ico" zugreifen, da sie von einem anderen Prozess 

verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.File.InternalDelete(String path, Boolean checkHost)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: An exception occured when trying to create the overlay 

icon.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit

\AppData\Local\Temp\HiDriveOverlayIcon1.ico" zugreifen, da sie von einem anderen Prozess 

verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, 

SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, 

Boolean checkHost)
   bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare 

share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   bei System.IO.FileStream..ctor(String path, FileMode mode)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.


==================== Memory info =========================== 

Processor: AMD FX(tm)-6300 Six-Core Processor 
Percentage of memory in use: 78%
Total physical RAM: 3995.93 MB
Available physical RAM: 852.67 MB
Total Pagefile: 7990.04 MB
Available Pagefile: 4207.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:55.8 GB) (Free:1.81 GB) NTFS
Drive e: (SATA 1TB_alt) (Fixed) (Total:931.51 GB) (Free:681.97 GB) NTFS
Drive o: (SATA 1TB_neu) (Fixed) (Total:931.04 GB) (Free:213.2 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: CC2CB2C0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9E891019)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 3862A23E)
Partition 1: (Not Active) - (Size=157 MB) - (Type=82)
Partition 2: (Not Active) - (Size=157 MB) - (Type=83)
Partition 3: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Pit (administrator) on WIN7_TURBO on 21-03-2015 17:28:14
Running from E:\E_Dateien\Downloads
Loaded Profiles: Pit (Available profiles: Pit & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Gene6) C:\Program Files (x86)\Gene6 FTP Server\G6FTPServer.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
() C:\Windows\DAODx.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Program Files (x86)\WizMouse\WizMouse.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TechniSat Digital, S.A.) C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(TechniSat Digital, S.A.) C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
(Microsoft Corporation) C:\Users\Pit\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\tobedeleted\moz201.tmp
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Dropbox, Inc.) C:\Users\Pit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files (x86)\Google\Update\Install\{416F469A-5D1E-4B40-8088-1992FF0E5CF2}\41.0.2272.101_40.0.2214.115_chrome_updater.exe
(Google Inc.) C:\Windows\Temp\CR_62303.tmp\setup.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2015-01-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [NeroFilterCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-09-26] ()
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\77279e13-2c77-432b-9e20-6e9cb31f256b.exe [183232 2015-03-21] (AVAST Software)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-04-09] (Siber Systems)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-11-27] (Sony)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [] => [X]
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [WizMouse] => C:\Program Files (x86)\WizMouse\WizMouse.exe [119000 2013-09-22] ()
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [OneDrive] => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-21] (Microsoft Corporation)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\RunOnce: [Uninstall C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\RunOnce: [Uninstall C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\MountPoints2: L - L:\SETUP.EXE
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\MountPoints2: {fe909f23-ca6c-11e3-9d4e-00d0d70c0946} - N:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Server4PC.lnk
ShortcutTarget: Server4PC.lnk -> C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe (TechniSat Digital, S.A.)
Startup: C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon1] -> {d1579988-bbea-3c73-bf3c-9d41b0d0ff30} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon2] -> {3e1084af-2a1c-3977-ae8a-0da683db91ce} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> DefaultScope {C14D67CC-9671-4B49-B747-6BC034945624} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> {C14D67CC-9671-4B49-B747-6BC034945624} URL = https://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-03-21] (IObit)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-22] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2014-04-09] (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-08] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-22] (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-08] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2014-04-09] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\Parameters: [DhcpNameServer] 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://www.gmx.de/| hxxp://www.facebook.com
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-21] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\Program Files (x86)\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> E:\Program Files (x86)\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-21] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\google-images.xml [2014-10-15]
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\google-maps.xml [2014-10-15]
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\search_engine.xml [2014-09-28]
FF Extension: GMX MailCheck - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\toolbar@gmx.net [2014-11-15]
FF Extension: Official My JDownloader Add-On - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2014-09-21]
FF Extension: Adblock Plus - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-04-09]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-04-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: Wondershare Video Converter Ultimate - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2014-10-07]
FF HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\extensions\cliqz@cliqz.com
FF Extension: No Name - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\extensions\iobitascsurfingprotection@iobit.com [Not Found]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.gmx.net/"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default -> https://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Profile: C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-17]
CHR Extension: (Google Drive) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-17]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-14]
CHR Extension: (YouTube) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-17]
CHR Extension: (Google Search) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-17]
CHR Extension: (Avast Online Security) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-17]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-12-04]
CHR Extension: (Google Wallet) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-17]
CHR Extension: (Gmail) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-17]
CHR HKU\S-1-5-21-669018618-3909585642-2056782394-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-22] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-22] (Avast Software)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-12-03] (Freemake) [File not signed]
R2 G6FTPServer; C:\Program Files (x86)\Gene6 FTP Server\G6FTPSERVER.EXE [470016 2007-10-22] (Gene6) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-17] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 NAUpdate; No ImagePath

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACLE7Live; C:\Windows\system32\Drivers\ACLE1864.sys [109160 2014-09-29] (Softwareentwicklung Remus - ArchiCrypt - )
R1 ACLiveFlt; C:\Windows\System32\DRIVERS\ACLiveFlt.sys [24680 2013-03-25] (ArchiCrypt - Softwareentwicklung Remus)
R1 ACLiveFlt; C:\Windows\SysWOW64\DRIVERS\ACLiveFlt.sys [24680 2013-03-25] (ArchiCrypt - Softwareentwicklung Remus)
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2015-01-05] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-22] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-22] ()
S3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [419520 2014-09-18] (EldoS Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-09] (Disc Soft Ltd)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-09-20] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-05] (REALiX(tm))
S2 MLPTDR_B; C:\Windows\SysWOW64\MLPTDR_B.SYS [20064 2006-12-08] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
S3 pfc; C:\Windows\SysWOW64\drivers\pfc.sys [10368 2014-04-09] (Padus, Inc.) [File not signed]
R3 SKYNET; C:\Windows\System32\DRIVERS\SkyNET_AMD64.SYS [617048 2010-05-10] (TechniSat Digital, S.A.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-22] (Avast Software)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 CLVirtualBus01; system32\DRIVERS\CLVirtualBus01.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 17:28 - 2015-03-21 17:28 - 00000000 ____D () C:\FRST
2015-03-21 17:20 - 2015-03-21 17:20 - 00000000 ____D () C:\Users\Pit\.appwork
2015-03-21 16:49 - 2015-03-21 17:14 - 00002904 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Pit
2015-03-08 13:10 - 2015-03-21 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-03 10:40 - 2015-03-21 17:07 - 00005130 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Win7_Turbo-Pit Win7_Turbo
2015-03-03 10:39 - 2015-03-21 16:47 - 00002172 _____ () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00002120 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00002120 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ___RD () C:\Users\Pit\OneDrive
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-03-02 21:20 - 2015-03-04 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-02 21:19 - 2015-03-02 21:19 - 00000000 ____D () C:\Windows\PCHEALTH
2015-03-02 21:19 - 2015-03-02 21:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-03-02 21:17 - 2015-03-02 21:17 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-03-02 21:17 - 2015-03-02 21:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-02-25 19:22 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-25 19:22 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-25 19:22 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-25 19:22 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-25 03:00 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 03:00 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 17:26 - 2014-07-07 16:44 - 00002042 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00002040 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-21 17:25 - 2014-04-09 15:29 - 01648355 _____ () C:\Windows\WindowsUpdate.log
2015-03-21 17:24 - 2014-04-17 15:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-21 17:24 - 2014-04-17 15:05 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-03-21 17:22 - 2015-01-05 17:10 - 00000000 ____D () C:\Program Files\NewBlue
2015-03-21 17:22 - 2015-01-05 17:10 - 00000000 ____D () C:\Program Files (x86)\NewBlue
2015-03-21 17:21 - 2014-09-15 17:55 - 00000000 ____D () C:\Users\Pit\AppData\Local\JDownloader v2.0
2015-03-21 17:20 - 2015-01-10 14:19 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-21 17:20 - 2014-04-09 15:31 - 00000000 ____D () C:\Users\Pit
2015-03-21 17:15 - 2014-09-28 00:01 - 00000710 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-03-21 17:14 - 2014-04-17 15:05 - 00000000 ____D () C:\ProgramData\ProductData
2015-03-21 17:13 - 2014-04-09 17:57 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-21 17:13 - 2014-04-09 17:57 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-21 17:13 - 2014-04-09 17:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-21 17:13 - 2014-04-09 17:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-21 16:54 - 2014-08-24 22:54 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-21 16:54 - 2014-08-24 22:54 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Dropbox
2015-03-21 16:53 - 2015-02-06 13:08 - 00000000 ____D () C:\Users\Pit\AppData\Local\CrashDumps
2015-03-21 16:49 - 2014-04-17 15:07 - 00001228 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-03-21 16:46 - 2014-04-17 15:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-21 16:38 - 2009-07-14 05:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-21 16:38 - 2009-07-14 05:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-21 16:35 - 2009-07-14 18:58 - 00702964 _____ () C:\Windows\system32\perfh007.dat
2015-03-21 16:35 - 2009-07-14 18:58 - 00150604 _____ () C:\Windows\system32\perfc007.dat
2015-03-21 16:35 - 2009-07-14 06:13 - 01629436 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-21 16:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-08 14:05 - 2014-04-09 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-08 13:37 - 2014-09-21 01:15 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\vlc
2015-03-08 13:33 - 2015-01-10 14:19 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-03-08 13:19 - 2014-04-14 11:07 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-03-08 13:06 - 2014-09-24 20:51 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-08 13:06 - 2014-09-24 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-08 13:06 - 2014-09-16 00:05 - 00000000 ____D () C:\Program Files\WinRAR
2015-03-08 12:57 - 2014-04-09 19:10 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\DAEMON Tools Lite
2015-03-08 12:46 - 2014-04-24 08:45 - 00002026 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-03-08 12:46 - 2014-04-24 08:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-03-08 12:46 - 2014-04-09 15:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-04 03:02 - 2014-04-09 17:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-04 03:02 - 2009-07-14 03:34 - 00000580 _____ () C:\Windows\win.ini
2015-03-02 22:44 - 2014-04-09 16:01 - 00178992 _____ () C:\Users\Pit\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-02 22:31 - 2009-07-14 05:45 - 00596544 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-02 21:21 - 2009-07-14 19:18 - 00000000 ____D () C:\Windows\ShellNew
2015-03-02 21:19 - 2014-04-09 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-03-02 21:18 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-02 21:17 - 2014-04-09 17:25 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-03-02 21:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-03-01 15:19 - 2014-04-09 18:04 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\BOM
2015-02-28 15:41 - 2014-10-07 18:07 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2015-02-28 15:41 - 2014-09-21 01:43 - 00000000 ____D () C:\Windows\Minidump
2015-02-28 15:41 - 2014-04-09 20:45 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\TeamViewer
2015-02-28 13:55 - 2014-10-06 21:13 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\dvdcss
2015-02-26 03:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-25 22:53 - 2014-04-17 14:57 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-25 22:53 - 2014-04-17 14:57 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-25 12:02 - 2014-09-01 11:48 - 00000000 __SHD () C:\Users\Pit\wc
2015-02-24 04:17 - 2010-02-09 23:35 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-19 18:27 - 2014-04-17 15:42 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-19 14:50 - 2014-04-09 20:45 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-02-19 13:39 - 2015-01-23 10:18 - 00004008 _____ () C:\Windows\system32\TeamViewer10_Hooks.log
2015-02-19 13:39 - 2015-01-23 10:18 - 00000971 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-19 13:39 - 2015-01-23 10:18 - 00000959 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk

==================== Files in the root of some directories =======

2014-04-09 15:47 - 2014-04-09 15:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-20 15:27 - 2014-11-20 16:54 - 0000177 _____ () C:\ProgramData\Temp.log

Some content of TEMP:
====================
C:\Users\Pit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8v5oax.dll
C:\Users\Pit\AppData\Local\Temp\dt_6A19.tmp.exe
C:\Users\Pit\AppData\Local\Temp\FreemakeVideoConverterFull.exe
C:\Users\Pit\AppData\Local\Temp\i4jdel0.exe
C:\Users\Pit\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Pit\AppData\Local\Temp\Maint000.exe
C:\Users\Pit\AppData\Local\Temp\npp.6.7.4.Installer.exe
C:\Users\Pit\AppData\Local\Temp\proxy_vole8487556608641953756.dll
C:\Users\Pit\AppData\Local\Temp\Quarantine.exe
C:\Users\Pit\AppData\Local\Temp\sqlite3.dll
C:\Users\Pit\AppData\Local\Temp\uninst.exe
C:\Users\Pit\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-08 12:35

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 21.03.2015, 17:44

hi,

Logs bitte nochmal posten. WordWrap in deinem Editor abschalten. Und Logs in Codetags posten. Und die FRST.txt fehlt auch noch

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

der_zap01 · 21.03.2015, 17:55

Addition.txt:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Pit at 2015-03-21 17:28:40
Running from E:\E_Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ACDSee 9 Foto-Manager (HKLM-x32\...\{7AE25201-3E12-4FA2-9E65-67CD475D9263}) (Version: 9.0.55 - ACD Systems Ltd.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5DDB9EF7-1BC0-C9C1-9829-6B9CF68AC357}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Any Video Converter 5.7.6 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apache Tomcat 8.0.3 (HKLM\...\nbi-tomcat-8.0.3.0.0) (Version:  - )
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArchiCrypt Live Version 7.0.6.10964 (HKLM\...\ArchiCrypt Live 7_is1) (Version: 7.0.6.10964 - Softwareentwicklung Patric Remus - ArchiCrypt)
Ashampoo Burning Studio 14 v.14.1.0 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.1.0 - Ashampoo GmbH & Co. KG)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.10.0 - Asmedia Technology)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink PowerDirector 13 (HKLM-x32\...\{BA385AFC-00B1-417C-8C20-74B996EF3AF0}) (Version: 13.0.2104.0 - CyberLink Corp.)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.44 - DivX, LLC)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
Dropbox (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
DVBViewer TE2 (HKLM-x32\...\DVBViewer TE2_is1) (Version:  - CM&V)
DVD-Cover v.1.5.1.6 (HKLM-x32\...\ST6UNST #1) (Version:  - )
EMDB 2.13 (HKLM-x32\...\EMDB_is1) (Version:  - Wicked & Wild Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FLAC To MP3 V4.0.5 (HKLM-x32\...\FLAC To MP3_is1) (Version:  - FLAC To MP3, Inc.)
Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
GlassFish Server Open Source Edition 4.0 (HKLM\...\nbi-glassfish-mod-4.0.0.89.0) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Drive (HKLM-x32\...\{6C36881B-0E51-4231-9D02-BF2149664D34}) (Version: 1.20.8672.3137 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
HiDrive (HKLM-x32\...\{02F3A598-7398-4047-A1D3-44B08AD42D8C}) (Version: 3.1.7.0 - STRATO AG)
HP Support Solutions Framework (HKLM-x32\...\{69FD2930-C361-47F6-822E-71B021526778}) (Version: 11.50.0015 - Hewlett-Packard Company)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.2.6.2 - IObit)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
K-Lite Mega Codec Pack 10.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.5 - )
MAGIX Common Components 1 (HKLM-x32\...\{7A8B2204-574B-42A2-A3DC-52AE142D197F}) (Version: 1.2.0.0 - MAGIX AG)
MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Movie Edit Pro 2014 Plus (HKLM-x32\...\MAGIX Movie Edit Pro 2014 Plus_is1) (Version:  - )
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{66BA340C-14B0-49EF-A9DB-C9D7C0D3E340}) (Version: 7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
MainConcept DTV Decoder Pro (HKLM-x32\...\{793FCE60-DE5E-4977-A942-A7B69A45B17D}) (Version: 1.5.0.2 - MainConcept GmbH)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 36.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.3 (x86 de)) (Version: 36.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
muvee Reveal 11 (HKLM-x32\...\{92150CEE-F017-9FF5-17C4-B1CEB1048A3D}) (Version: 11.0.0.26762 - muvee Technologies Pte Ltd)
muvee Reveal Runtime (HKLM-x32\...\{89018418-6136-4BA8-BAF9-FC0D3C4D4DDA}) (Version: 11.0.0.26762 - muvee Technologies Pte Ltd)
NAVIGON Fresh 3.5.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
NetBeans IDE 8.0 (HKLM\...\nbi-nb-base-8.0.0.0.201403101706) (Version: 8.0 - NetBeans.org)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
O&O DiskRecovery (HKLM\...\{663A0073-D1FD-42B8-899F-AA5FA8359704}) (Version: 8.0.335 - O&O Software GmbH)
Ontrack EasyRecovery Professional (HKLM-x32\...\InstallShield_{268723B7-A994-4286-9F85-B974D5CAFC7B}) (Version: 6.22.01 - Kroll Ontrack Inc.)
Ontrack EasyRecovery Professional (x32 Version: 6.22.01 - Kroll Ontrack Inc.) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge)
Prerequisite installer (x32 Version: 12.0.0005 - Nero AG) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
RoboForm 7-9-6-6 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-6-6 - Siber Systems)
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
skillpipe Reader (HKLM-x32\...\{31282BD3-48FC-45A1-8826-9744FE55C046}) (Version: 2.1.132.0 - arvato)
Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.12.201408250841 - Sony Mobile Communications AB)
Sony PC Companion 2.10.251 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.251 - Sony)
StarMoney (x32 Version: 4.0.4.16 - StarFinanz) Hidden
StarMoney 9.0 S-Edition (HKLM-x32\...\{442138A9-4D2A-4AFC-9D88-B9EA7A2ACD22}) (Version: 9.0 - Star Finanz GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
TechniSat DVB-PC TV Star (HKLM-x32\...\{D032A7F0-8B5C-4603-8B46-235025D5F9C1}) (Version: 4.3.3 - TechniSat)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinHTTrack Website Copier 3.48-17 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.17 - HTTrack)
Winmail Opener 1.4 (HKLM-x32\...\Winmail Opener) (Version: 1.4 - Eolsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WizMouse v1.7.0.3 (HKLM-x32\...\WizMouse_is1) (Version:  - Antibody Software)
Wondershare Video Converter Ultimate(Build 7.4.1.1) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 7.4.1.1 - Wondershare Software)
Wunderlist (HKLM-x32\...\{05005782-A2CD-4EF9-B838-C3B00FED2412}) (Version: 3.2.1.1 - 6 Wunderkinder GmbH)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-669018618-3909585642-2056782394-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

21-03-2015 17:12:18 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {258345BC-39D4-4FFF-B736-5B95848DA521} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMKMLMMMJJJMIMIMKJCNGMOJJJHMCNLMKJJJHMCNNJIMLJKMCNLJLMKJKMIMHMLJHMNMIMNJJJJNJICMIMCNGMCNJMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMLMFMOMNMLJPMOMFMPMJNHICMOMNMLJPMOMJNBJCMPKGJLIJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {2C1E489F-59F6-4698-B2A0-ED790F659D74} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)
Task: {328F9573-59E2-4744-8358-A25D4A402201} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-21] (Adobe Systems Incorporated)
Task: {32DD1A1A-9961-4B92-A7D6-624747A76FD8} - System32\Tasks\Driver Booster SkipUAC (Pit) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-12-17] (IObit)
Task: {4DF4AC7A-49F7-43E1-AD24-CE3556C74133} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {51DBC17B-B40D-43C3-B095-F0FBA77BD9B5} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-01-13] ()
Task: {61121E06-96FA-4BE1-95C7-0D2FDAEA65F5} - System32\Tasks\Uninstaller_SkipUac_Pit => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit)
Task: {64851611-882B-47E6-86A0-7E9390F7C02A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (Microsoft Corporation)
Task: {6BD9F6B6-4085-47F4-817C-747EC2532F92} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {780D1870-25F2-4A3B-BBAF-AA9DCFC22E99} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {7DA8561C-42E3-4ABB-AE26-7F071D5AA0C9} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Win7_Turbo-Pit Win7_Turbo => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2015-01-21] (Microsoft Corporation)
Task: {842021E7-12A6-4DB9-923A-1B70BA587F87} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-04-09] (Siber Systems)
Task: {8E764516-1687-4ACA-B674-E3B4DC9E7C07} - System32\Tasks\avastBCLRestartS-1-5-21-669018618-3909585642-2056782394-1000 => Chrome.exe 
Task: {90978530-A97C-4408-9E46-891C02F136A1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (Microsoft Corporation)
Task: {94B9A159-4D93-4518-ACED-4097C4DE9D08} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {963921E4-51A1-4840-A520-E393F0027EF4} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-22] (AVAST Software)
Task: {ABFB0974-6F7E-491B-B651-99D19A4E5C76} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
Task: {D961259F-1F71-4D0A-8E37-6F64FD86712C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {E7A4449E-5377-4A2E-AA26-9A836B221199} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)
Task: {EA5D879C-E1D1-4558-9357-9ADDBF65AE87} - System32\Tasks\{763F1876-53E5-4374-AFA6-0D0133B0E190} => pcalua.exe -a E:\Warez\extracted\Nero.2015.Platinum.v16.0.03000.Final.Multilanguage-RBC\Nero2015_setup-16.0.03000.exe -d E:\Warez\extracted\Nero.2015.Platinum.v16.0.03000.Final.Multilanguage-RBC
Task: {F01A0B0A-0715-4103-8A29-77ACD7680D34} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-04-09 16:53 - 2013-01-31 10:25 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2009-03-30 07:32 - 2009-03-30 07:32 - 00032768 ____R () C:\Windows\DAODx.exe
2015-01-05 22:50 - 2013-09-22 10:27 - 00119000 _____ () C:\Program Files (x86)\WizMouse\WizMouse.exe
2014-04-24 08:44 - 2014-06-23 08:07 - 00113376 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2015-02-19 22:40 - 2015-02-19 22:40 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-03-21 17:27 - 2015-03-19 22:36 - 10031184 _____ () C:\Program Files (x86)\Google\Update\Install\{416F469A-5D1E-4B40-8088-1992FF0E5CF2}\41.0.2272.101_40.0.2214.115_chrome_updater.exe
2015-03-09 22:07 - 2015-03-09 22:07 - 02920960 _____ () C:\Program Files\AVAST Software\Avast\defs\15030901\algo.dll
2015-03-21 16:31 - 2015-03-21 16:31 - 02922496 _____ () C:\Program Files\AVAST Software\Avast\defs\15032100\algo.dll
2007-10-22 15:34 - 2007-10-22 15:34 - 00649728 _____ () C:\Program Files (x86)\Gene6 FTP Server\libeay32.DLL
2007-10-22 15:35 - 2007-10-22 15:35 - 00232448 _____ () C:\Program Files (x86)\Gene6 FTP Server\libssl32.DLL
2014-08-07 01:22 - 2011-01-13 09:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\PATCHW32.dll
2014-04-24 08:44 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2014-04-24 08:44 - 2014-12-04 14:18 - 00241152 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2013-06-11 09:31 - 2013-06-11 09:31 - 00090112 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CalEngine.dll
2012-04-04 14:33 - 2012-04-04 14:33 - 00139776 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdLNotes.dll
2013-01-08 17:02 - 2013-01-08 17:02 - 00163840 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdOutlook.dll
2012-07-26 11:51 - 2012-07-26 11:51 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VistaCalendar.dll
2014-04-24 08:44 - 2010-01-11 15:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2011-01-05 15:01 - 2011-01-05 15:01 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PimNotes.dll
2011-07-07 14:54 - 2011-07-07 14:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2014-04-24 08:44 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2014-09-15 15:20 - 2014-09-15 15:20 - 00645120 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll
2014-04-09 20:43 - 2010-03-30 12:25 - 00120320 _____ () C:\Program Files (x86)\TechniSat DVB\bin\LIBBZ2.dll
2014-11-22 13:39 - 2014-11-22 13:39 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-07 18:08 - 2014-08-05 09:22 - 01489408 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-10-07 18:08 - 2014-05-19 16:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2015-03-21 16:49 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2015-03-21 16:49 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2015-03-21 16:49 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () C:\Users\Pit\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-21 16:54 - 2015-03-21 16:54 - 00043008 _____ () c:\users\pit\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8v5oax.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () C:\Users\Pit\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () C:\Users\Pit\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () C:\Users\Pit\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll
2015-02-19 18:27 - 2015-02-17 23:44 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00098816 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32api.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00110080 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\pywintypes27.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00364544 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\pythoncom27.dll
2015-03-21 17:26 - 2015-03-21 17:26 - 00045568 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_socket.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01161216 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_ssl.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00320512 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32com.shell.shell.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00713216 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_hashlib.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01175040 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._core_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00805888 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._gdi_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00811008 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._windows_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 01062400 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._controls_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00735232 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._misc_.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00682496 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\pysqlite2._sqlite.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00128512 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_elementtree.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00127488 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\pyexpat.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00087552 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_ctypes.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00119808 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32file.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00108544 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32security.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00007168 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\hashobjs_ext.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00167936 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32gui.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00018432 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32event.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00038912 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32inet.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00011264 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32crypt.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00070656 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._html2.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00027136 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_multiprocessing.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00020480 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\_yappi.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00035840 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32process.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00686080 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\unicodedata.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00122368 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._wizard.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00024064 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32pipe.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00010240 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\select.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00025600 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32pdh.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00525640 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\windows._lib_cacheinvalidation.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00017408 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32profile.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00022528 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\win32ts.pyd
2015-03-21 17:26 - 2015-03-21 17:26 - 00078336 _____ () C:\Users\Pit\AppData\Local\Temp\_MEI67122\wx._animate.pyd

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Microsoft Toolkit 2.5.2:com.dropbox.attributes
AlternateDataStreams: C:\ProgramData\TEMP:B755D674
AlternateDataStreams: C:\ProgramData\TEMP:D78D6FF7

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-669018618-3909585642-2056782394-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-669018618-3909585642-2056782394-500 - Administrator - Disabled)
Gast (S-1-5-21-669018618-3909585642-2056782394-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-669018618-3909585642-2056782394-1003 - Limited - Enabled)
Pit (S-1-5-21-669018618-3909585642-2056782394-1000 - Administrator - Enabled) => C:\Users\Pit
UpdatusUser (S-1-5-21-669018618-3909585642-2056782394-1001 - Limited - Enabled) => C:\Users\UpdatusUser
VPN Benutzer (S-1-5-21-669018618-3909585642-2056782394-1005 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/08/2015 11:47:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/08/2015 01:37:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e5d
ID des fehlerhaften Prozesses: 0x199c
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (03/08/2015 00:37:21 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/04/2015 01:20:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit\AppData\Local\Temp\HiDriveOverlayIcon2.ico" zugreifen, da sie von einem anderen Prozess verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.File.InternalDelete(String path, Boolean checkHost)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: An exception occured when trying to create the overlay icon.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit\AppData\Local\Temp\HiDriveOverlayIcon1.ico" zugreifen, da sie von einem anderen Prozess verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   bei System.IO.FileStream..ctor(String path, FileMode mode)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.


System errors:
=============
Error: (03/21/2015 05:15:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Advanced SystemCare Service 8" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/21/2015 04:49:29 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Advanced SystemCare Service 8" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (03/21/2015 04:32:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/21/2015 04:32:48 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/21/2015 04:30:42 PM) (Source: Service Control Manager) (EventID: 7002) (User: )
Description: Der Dienst "MLPTDR_B" ist von der Gruppe "Parallel arbitrator" abhängig. Kein Mitglied dieser Gruppe wurde jedoch gestartet.

Error: (03/08/2015 02:07:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/08/2015 02:07:33 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/08/2015 02:05:27 PM) (Source: Service Control Manager) (EventID: 7002) (User: )
Description: Der Dienst "MLPTDR_B" ist von der Gruppe "Parallel arbitrator" abhängig. Kein Mitglied dieser Gruppe wurde jedoch gestartet.

Error: (03/08/2015 00:20:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/08/2015 00:20:36 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (03/08/2015 11:47:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/08/2015 01:37:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.18247521eaf24c00000050000000000018e5d199c01d0599c9a85aa85E:\Program Files (x86)\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dlle6f2715a-c58f-11e4-82e4-00d0d70c0946

Error: (03/08/2015 00:37:21 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/04/2015 01:20:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit\AppData\Local\Temp\HiDriveOverlayIcon2.ico" zugreifen, da sie von einem anderen Prozess verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.File.InternalDelete(String path, Boolean checkHost)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon2: An exception occured when trying to create the overlay icon.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: System.IO.IOException: Der Prozess kann nicht auf die Datei "C:\Users\Pit\AppData\Local\Temp\HiDriveOverlayIcon1.ico" zugreifen, da sie von einem anderen Prozess verwendet wird.
   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   bei System.IO.FileStream..ctor(String path, FileMode mode)
   bei SharpShell.SharpIconOverlayHandler.SharpIconOverlayHandler.GetIconFilePath()

Error: (03/03/2015 10:40:44 AM) (Source: SharpShell) (EventID: 0) (User: )
Description: HiDriveOverlayIcon1: Cannot create the overlay icon path.


==================== Memory info =========================== 

Processor: AMD FX(tm)-6300 Six-Core Processor 
Percentage of memory in use: 78%
Total physical RAM: 3995.93 MB
Available physical RAM: 852.67 MB
Total Pagefile: 7990.04 MB
Available Pagefile: 4207.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:55.8 GB) (Free:1.81 GB) NTFS
Drive e: (SATA 1TB_alt) (Fixed) (Total:931.51 GB) (Free:681.97 GB) NTFS
Drive o: (SATA 1TB_neu) (Fixed) (Total:931.04 GB) (Free:213.2 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: CC2CB2C0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9E891019)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 3862A23E)
Partition 1: (Not Active) - (Size=157 MB) - (Type=82)
Partition 2: (Not Active) - (Size=157 MB) - (Type=83)
Partition 3: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Pit (administrator) on WIN7_TURBO on 21-03-2015 17:28:14
Running from E:\E_Dateien\Downloads
Loaded Profiles: Pit (Available profiles: Pit & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Gene6) C:\Program Files (x86)\Gene6 FTP Server\G6FTPServer.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
() C:\Windows\DAODx.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Program Files (x86)\WizMouse\WizMouse.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TechniSat Digital, S.A.) C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(TechniSat Digital, S.A.) C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
(Microsoft Corporation) C:\Users\Pit\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\tobedeleted\moz201.tmp
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Dropbox, Inc.) C:\Users\Pit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files (x86)\Google\Update\Install\{416F469A-5D1E-4B40-8088-1992FF0E5CF2}\41.0.2272.101_40.0.2214.115_chrome_updater.exe
(Google Inc.) C:\Windows\Temp\CR_62303.tmp\setup.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2015-01-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [NeroFilterCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-09-26] ()
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\77279e13-2c77-432b-9e20-6e9cb31f256b.exe [183232 2015-03-21] (AVAST Software)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-04-09] (Siber Systems)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-11-27] (Sony)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [] => [X]
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [WizMouse] => C:\Program Files (x86)\WizMouse\WizMouse.exe [119000 2013-09-22] ()
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Run: [OneDrive] => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-21] (Microsoft Corporation)
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\RunOnce: [Uninstall C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\RunOnce: [Uninstall C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\MountPoints2: L - L:\SETUP.EXE
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\MountPoints2: {fe909f23-ca6c-11e3-9d4e-00d0d70c0946} - N:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Server4PC.lnk
ShortcutTarget: Server4PC.lnk -> C:\Program Files (x86)\TechniSat DVB\bin\Server4PC.exe (TechniSat Digital, S.A.)
Startup: C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Pit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon1] -> {d1579988-bbea-3c73-bf3c-9d41b0d0ff30} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon2] -> {3e1084af-2a1c-3977-ae8a-0da683db91ce} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Pit\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pit\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-669018618-3909585642-2056782394-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> DefaultScope {C14D67CC-9671-4B49-B747-6BC034945624} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> {C14D67CC-9671-4B49-B747-6BC034945624} URL = https://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-03-21] (IObit)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-22] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2014-04-09] (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-08] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-22] (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-08] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2014-04-09] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-669018618-3909585642-2056782394-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2014-04-09] (Siber Systems Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\Parameters: [DhcpNameServer] 0.0.0.0

FireFox:
========
FF ProfilePath: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://www.gmx.de/| hxxp://www.facebook.com
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-21] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\Program Files (x86)\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> E:\Program Files (x86)\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-21] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\google-images.xml [2014-10-15]
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\google-maps.xml [2014-10-15]
FF SearchPlugin: C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\searchplugins\search_engine.xml [2014-09-28]
FF Extension: GMX MailCheck - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\toolbar@gmx.net [2014-11-15]
FF Extension: Official My JDownloader Add-On - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2014-09-21]
FF Extension: Adblock Plus - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-01]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-04-09]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-04-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-17]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: Wondershare Video Converter Ultimate - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2014-10-07]
FF HKU\S-1-5-21-669018618-3909585642-2056782394-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\extensions\cliqz@cliqz.com
FF Extension: No Name - C:\Users\Pit\AppData\Roaming\Mozilla\Firefox\Profiles\81uev2sq.default-1410807675810\extensions\iobitascsurfingprotection@iobit.com [Not Found]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.gmx.net/"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default -> https://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Profile: C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-17]
CHR Extension: (Google Drive) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-17]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-14]
CHR Extension: (YouTube) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-17]
CHR Extension: (Google Search) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-17]
CHR Extension: (Avast Online Security) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-17]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-12-04]
CHR Extension: (Google Wallet) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-17]
CHR Extension: (Gmail) - C:\Users\Pit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-17]
CHR HKU\S-1-5-21-669018618-3909585642-2056782394-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-22] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-22] (Avast Software)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-12-03] (Freemake) [File not signed]
R2 G6FTPServer; C:\Program Files (x86)\Gene6 FTP Server\G6FTPSERVER.EXE [470016 2007-10-22] (Gene6) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-17] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 NAUpdate; No ImagePath

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACLE7Live; C:\Windows\system32\Drivers\ACLE1864.sys [109160 2014-09-29] (Softwareentwicklung Remus - ArchiCrypt - )
R1 ACLiveFlt; C:\Windows\System32\DRIVERS\ACLiveFlt.sys [24680 2013-03-25] (ArchiCrypt - Softwareentwicklung Remus)
R1 ACLiveFlt; C:\Windows\SysWOW64\DRIVERS\ACLiveFlt.sys [24680 2013-03-25] (ArchiCrypt - Softwareentwicklung Remus)
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2015-01-05] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-22] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-22] ()
S3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [419520 2014-09-18] (EldoS Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-09] (Disc Soft Ltd)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-09-20] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-05] (REALiX(tm))
S2 MLPTDR_B; C:\Windows\SysWOW64\MLPTDR_B.SYS [20064 2006-12-08] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
S3 pfc; C:\Windows\SysWOW64\drivers\pfc.sys [10368 2014-04-09] (Padus, Inc.) [File not signed]
R3 SKYNET; C:\Windows\System32\DRIVERS\SkyNET_AMD64.SYS [617048 2010-05-10] (TechniSat Digital, S.A.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-22] (Avast Software)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 CLVirtualBus01; system32\DRIVERS\CLVirtualBus01.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 17:28 - 2015-03-21 17:28 - 00000000 ____D () C:\FRST
2015-03-21 17:20 - 2015-03-21 17:20 - 00000000 ____D () C:\Users\Pit\.appwork
2015-03-21 16:49 - 2015-03-21 17:14 - 00002904 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Pit
2015-03-08 13:10 - 2015-03-21 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-03 10:40 - 2015-03-21 17:07 - 00005130 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Win7_Turbo-Pit Win7_Turbo
2015-03-03 10:39 - 2015-03-21 16:47 - 00002172 _____ () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00002120 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00002120 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ___RD () C:\Users\Pit\OneDrive
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-03-03 10:39 - 2015-03-03 10:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-03-02 21:20 - 2015-03-04 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-02 21:19 - 2015-03-02 21:19 - 00000000 ____D () C:\Windows\PCHEALTH
2015-03-02 21:19 - 2015-03-02 21:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-03-02 21:17 - 2015-03-02 21:17 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-03-02 21:17 - 2015-03-02 21:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-02-25 19:22 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-25 19:22 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-25 19:22 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-25 19:22 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-25 03:00 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 03:00 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-21 17:26 - 2014-07-07 16:44 - 00002042 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00002040 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2015-03-21 17:26 - 2014-07-07 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-21 17:25 - 2014-04-09 15:29 - 01648355 _____ () C:\Windows\WindowsUpdate.log
2015-03-21 17:24 - 2014-04-17 15:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-21 17:24 - 2014-04-17 15:05 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-03-21 17:22 - 2015-01-05 17:10 - 00000000 ____D () C:\Program Files\NewBlue
2015-03-21 17:22 - 2015-01-05 17:10 - 00000000 ____D () C:\Program Files (x86)\NewBlue
2015-03-21 17:21 - 2014-09-15 17:55 - 00000000 ____D () C:\Users\Pit\AppData\Local\JDownloader v2.0
2015-03-21 17:20 - 2015-01-10 14:19 - 00000000 ____D () C:\Program Files (x86)\Java
2015-03-21 17:20 - 2014-04-09 15:31 - 00000000 ____D () C:\Users\Pit
2015-03-21 17:15 - 2014-09-28 00:01 - 00000710 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-03-21 17:14 - 2014-04-17 15:05 - 00000000 ____D () C:\ProgramData\ProductData
2015-03-21 17:13 - 2014-04-09 17:57 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-21 17:13 - 2014-04-09 17:57 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-21 17:13 - 2014-04-09 17:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-21 17:13 - 2014-04-09 17:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-21 16:54 - 2014-08-24 22:54 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-21 16:54 - 2014-08-24 22:54 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Dropbox
2015-03-21 16:53 - 2015-02-06 13:08 - 00000000 ____D () C:\Users\Pit\AppData\Local\CrashDumps
2015-03-21 16:49 - 2014-04-17 15:07 - 00001228 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-03-21 16:46 - 2014-04-17 15:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-21 16:38 - 2009-07-14 05:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-21 16:38 - 2009-07-14 05:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-21 16:35 - 2009-07-14 18:58 - 00702964 _____ () C:\Windows\system32\perfh007.dat
2015-03-21 16:35 - 2009-07-14 18:58 - 00150604 _____ () C:\Windows\system32\perfc007.dat
2015-03-21 16:35 - 2009-07-14 06:13 - 01629436 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-21 16:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-08 14:05 - 2014-04-09 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-08 13:37 - 2014-09-21 01:15 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\vlc
2015-03-08 13:33 - 2015-01-10 14:19 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-03-08 13:19 - 2014-04-14 11:07 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-03-08 13:06 - 2014-09-24 20:51 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-08 13:06 - 2014-09-24 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-08 13:06 - 2014-09-16 00:05 - 00000000 ____D () C:\Program Files\WinRAR
2015-03-08 12:57 - 2014-04-09 19:10 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\DAEMON Tools Lite
2015-03-08 12:46 - 2014-04-24 08:45 - 00002026 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-03-08 12:46 - 2014-04-24 08:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-03-08 12:46 - 2014-04-09 15:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-04 03:02 - 2014-04-09 17:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-04 03:02 - 2009-07-14 03:34 - 00000580 _____ () C:\Windows\win.ini
2015-03-02 22:44 - 2014-04-09 16:01 - 00178992 _____ () C:\Users\Pit\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-02 22:31 - 2009-07-14 05:45 - 00596544 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-02 21:21 - 2009-07-14 19:18 - 00000000 ____D () C:\Windows\ShellNew
2015-03-02 21:19 - 2014-04-09 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-03-02 21:18 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-02 21:17 - 2014-04-09 17:25 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-03-02 21:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-03-01 15:19 - 2014-04-09 18:04 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\BOM
2015-02-28 15:41 - 2014-10-07 18:07 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2015-02-28 15:41 - 2014-09-21 01:43 - 00000000 ____D () C:\Windows\Minidump
2015-02-28 15:41 - 2014-04-09 20:45 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\TeamViewer
2015-02-28 13:55 - 2014-10-06 21:13 - 00000000 ____D () C:\Users\Pit\AppData\Roaming\dvdcss
2015-02-26 03:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-25 22:53 - 2014-04-17 14:57 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-25 22:53 - 2014-04-17 14:57 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-25 12:02 - 2014-09-01 11:48 - 00000000 __SHD () C:\Users\Pit\wc
2015-02-24 04:17 - 2010-02-09 23:35 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-19 18:27 - 2014-04-17 15:42 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-19 14:50 - 2014-04-09 20:45 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-02-19 13:39 - 2015-01-23 10:18 - 00004008 _____ () C:\Windows\system32\TeamViewer10_Hooks.log
2015-02-19 13:39 - 2015-01-23 10:18 - 00000971 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-19 13:39 - 2015-01-23 10:18 - 00000959 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk

==================== Files in the root of some directories =======

2014-04-09 15:47 - 2014-04-09 15:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-20 15:27 - 2014-11-20 16:54 - 0000177 _____ () C:\ProgramData\Temp.log

Some content of TEMP:
====================
C:\Users\Pit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8v5oax.dll
C:\Users\Pit\AppData\Local\Temp\dt_6A19.tmp.exe
C:\Users\Pit\AppData\Local\Temp\FreemakeVideoConverterFull.exe
C:\Users\Pit\AppData\Local\Temp\i4jdel0.exe
C:\Users\Pit\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Pit\AppData\Local\Temp\Maint000.exe
C:\Users\Pit\AppData\Local\Temp\npp.6.7.4.Installer.exe
C:\Users\Pit\AppData\Local\Temp\proxy_vole8487556608641953756.dll
C:\Users\Pit\AppData\Local\Temp\Quarantine.exe
C:\Users\Pit\AppData\Local\Temp\sqlite3.dll
C:\Users\Pit\AppData\Local\Temp\uninst.exe
C:\Users\Pit\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-08 12:35

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 22.03.2015, 08:03

viel besser

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Ich habe auch das Problem mit trackid=sp-006

Log-Analyse und Auswertung: Ich habe auch das Problem mit trackid=sp-006