Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
unico Browser. lässt sich nicht mehr deinstalieren

unico Browser. lässt sich nicht mehr deinstalieren


Plagegeister aller Art und deren Bekämpfung: unico Browser. lässt sich nicht mehr deinstalieren

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 18.04.2015, 18:59   #1
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Hallo zusammen ich habe ein riesen grossen. Seit ein paar Wochen habe ich ein Laptop mit Windows 8 . Jetzt habe ich nachdem etliche Webseiten aufgegangen sind
die ich immer am x wieder geschlossen habe,
der unicon Browser , und eutliche andere Programme auf meinem pc die sich nicht löschon lassen über die systemsteuerung
Es wird immer wieder angezeigt bitte warten bis die vorherige denstallation beendet ist. Es geht beiFirefox nichts mehr . Habe in der Einstellung bei Mozilla diesen als Standards browser angekluckt aber das hat keine Funktion. LG netty

Alt 18.04.2015, 19:17   #2
schrauber
/// the machine
/// TB-Ausbilder
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 18.04.2015, 21:43   #3
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


hi der scan ist jetzt durch und eine seite frst editor ist aufgegangen meinst du dies mit frst txt
__________________
Alt 19.04.2015, 07:43   #4
schrauber
/// the machine
/// TB-Ausbilder
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Es gehen zwei Dateien auf mit Namen FRST.txt und Addition.txt. Diese hier posten, in Codetags.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 21.04.2015, 10:26   #5
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


[/CODE]
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01
Ran by Annette (administrator) on MAUSI1702PC on 18-04-2015 21:42:45
Running from C:\Users\Annette\Downloads
Loaded Profiles: Annette (Available profiles: Annette)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
() C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
() C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp
() C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp
() C:\Program Files (x86)\QuickRef_1.10.0.12\Service\qrsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
() C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Dropbox, Inc.) C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(iCinema) C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
() C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-10.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-10.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Cinema PlusV17.04) C:\Program Files (x86)\Cinema PlusV17.04-ntf\eccac44b-b825-4b67-a2cc-947a2db058b1-10.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
Failed to access process -> CCL.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\XTab\HPNotify.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebApp.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(                                                            ) C:\Users\Annette\AppData\Local\Temp\nsa3477.tmp
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [217088 2014-06-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [66304 2015-03-18] (Acer Incorporated)
HKLM-x32\...\Run: [WinCheck] => C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058\bnsuFD9F.exe [193536 2015-04-17] ()
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2015-04-16] ()
HKLM-x32\...\RunOnce: [upgmsd_de_436.exe] => C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe [3308488 2015-04-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Annette\AppData\Roaming\ASPackage\ASPackage.exe /runonce
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.52\OptProLauncher.exe
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-04-12] ()
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-04-12] (Client Connect LTD)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50046;https=127.0.0.1:50046
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_coinis_15_07&cd=2XzuyEtN2Y1L1Qzu0CyEyDyEyEyE0D0FtCtCtCtCtB0CyDtBtN0D0Tzu0StCtCtAyCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtB0FzzyBtAtDyBtGtByE0DyEtG0EyE0DtDtGtDzzzztDtGtD0A0F0DzztB0DyDyC0AtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByDzyyDtAtBtD0FtGyB0BtB0EtGyEtDtB0DtG0ByEtAyBtGtBtCtBtBtC0AyEyCzy0BzzyC2Q&cr=877273299&ir=
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {7FCF1C48-0FA2-4932-89D5-6834E66CC742} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {8375696E-A674-4B0C-B3D7-D8A5059D8C6A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {ABCF9631-C248-4417-BBAF-0E7C9888C68A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F05C4836-A999-43C5-9C55-5C3D999E5683} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F11A6ACE-4F08-41F8-9FB5-764DE0EFB067} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
BHO: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO-x32: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} ->  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 02 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 03 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 04 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 16 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.facebook.com/?ref=tn_tnmn
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF user.js: detected! => C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\user.js [2015-04-18]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\bing-.xml [2015-03-03]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-images.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-maps.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\mystartsearch-1.xml [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\bingsearch.full@microsoft.com [2015-03-03]
FF Extension: BetteRPriceCheC - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\mRuPixfo@Q.org [2015-04-13]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\sparpilot@sparpilot.com [2015-04-07]
FF Extension: WEB.DE MailCheck - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\toolbar@web.de [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{091b6afa-55ed-d744-2edb-3f53f48efa6f} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{4dcd442b-c6b8-861d-356e-4e32f24e540d} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-09]
FF Extension: Adblock Plus - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-12]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (GoHD) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-04-18]
OPR Extension: (PalMall) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fjadmdmahkpbhgbmmkiiaanlnlekelmn [2015-04-18]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe istartsurf

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [22376 2015-01-08] ()
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94208 2014-05-06] () [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2749696 2015-03-18] (Acer Incorporated)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-04-12] (Client Connect LTD) [File not signed]
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 f8794fcc; c:\Program Files (x86)\Optimizer Pro 3.52\OptProMon.dll [2018856 2015-03-04] ()
R2 fogezyny; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp [185856 2015-04-07] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-26] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [93408 2015-02-08] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-06-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 lupuzyky; C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp [94720 2015-04-18] () [File not signed]
R2 pihofyby; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp [102912 2015-03-03] () [File not signed]
R2 popineje; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp [251904 2015-04-18] () [File not signed]
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R2 tycubyto; C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp [98304 2015-04-18] () [File not signed]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 zorevige; C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp [226304 2015-04-18] () [File not signed]
S4 fozududy; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\nsg81E1.tmpfs [X]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /svc [X] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] <==== ATTENTION
S3 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 aswSP; No ImagePath
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [110824 2014-06-11] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2014-10-30] (Intel Corporation)
S3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [573144 2014-04-18] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3468504 2014-05-22] (Realtek Semiconductor Corporation                           )
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:11 - 2015-04-18 22:11 - 00055104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cwovjymd.sys
2015-04-18 21:42 - 2015-04-18 21:52 - 00032636 _____ () C:\Users\Annette\Downloads\FRST.txt
2015-04-18 21:40 - 2015-04-18 21:45 - 00000000 ____D () C:\FRST
2015-04-18 21:33 - 2015-04-18 21:34 - 02098176 _____ (Farbar) C:\Users\Annette\Downloads\FRST64.exe
2015-04-18 20:00 - 2015-04-18 20:29 - 00000000 ____D () C:\Program Files\Reimage
2015-04-18 19:57 - 2015-04-18 20:29 - 00000158 _____ () C:\Windows\Reimage.ini
2015-04-18 19:55 - 2015-04-18 19:55 - 00768512 _____ (Reimage®) C:\Users\Annette\Downloads\ReimageRepair.exe
2015-04-18 19:15 - 2015-04-18 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer(1).exe
2015-04-18 19:02 - 2015-04-18 19:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer.exe
2015-04-18 17:35 - 2015-04-18 17:35 - 00000000 ____D () C:\Users\Annette\AppData\Local\Crossbrowse
2015-04-18 14:58 - 2015-04-18 14:57 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 13:32 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
2015-04-18 13:01 - 2015-04-18 13:01 - 00000000 ____D () C:\Users\Annette\SupTab
2015-04-18 13:00 - 2015-04-18 13:00 - 00003178 _____ () C:\Windows\System32\Tasks\Run_Browser
2015-04-18 12:59 - 2015-04-18 13:00 - 00000000 ____D () C:\Users\Annette\AppData\Local\UnicoBrowser
2015-04-18 12:55 - 2015-04-18 12:55 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-04-18 12:53 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\istartsurf
2015-04-18 12:47 - 2015-04-18 12:47 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 12:38 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\QuickRef_1.10.0.12
2015-04-18 12:32 - 2015-04-18 12:32 - 00000008 _____ () C:\END
2015-04-18 12:25 - 2015-04-18 12:25 - 00003114 _____ () C:\Windows\System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A}
2015-04-18 12:24 - 2015-04-18 12:23 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2015-04-18 12:19 - 2015-04-18 12:19 - 00001929 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-04-18 12:18 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GoHD
2015-04-18 12:17 - 2015-04-18 18:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\systweak
2015-04-18 12:17 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\SysWOW64\CCLOff.ini
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\system32\CCLOff.ini
2015-04-18 12:09 - 2015-04-18 22:25 - 00001366 _____ () C:\Windows\Tasks\AFCZ.job
2015-04-18 12:09 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\IGS
2015-04-18 12:09 - 2015-04-18 12:09 - 00004384 _____ () C:\Windows\System32\Tasks\AFCZ
2015-04-18 12:09 - 2015-04-16 09:20 - 00341696 _____ (CC Corporation) C:\Windows\SysWOW64\CCL.dll
2015-04-18 12:08 - 2015-04-18 12:08 - 00000000 ____D () C:\Users\Annette\AppData\Local\Macromedia
2015-04-18 12:07 - 2015-04-18 19:55 - 00001370 _____ () C:\Windows\Tasks\EWSRRH.job
2015-04-18 12:07 - 2015-04-18 12:07 - 00004386 _____ () C:\Windows\System32\Tasks\EWSRRH
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Users\Annette\AppData\Local\globalUpdate
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV17.04-ntf
2015-04-18 12:06 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-04-18 12:05 - 2015-04-18 12:05 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
2015-04-18 12:03 - 2015-04-18 20:37 - 00000000 ____D () C:\Users\Annette\AppData\Local\BrowserHelper
2015-04-18 12:02 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Local\SmartWeb
2015-04-18 12:01 - 2015-04-18 19:56 - 00000000 ____D () C:\Program Files (x86)\Infonaut_1.10.0.14
2015-04-18 12:00 - 2015-04-18 20:30 - 00000000 ____D () C:\Users\Annette\AppData\Local\gmsd_de_436
2015-04-18 12:00 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_436
2015-04-18 11:58 - 2015-04-18 20:01 - 00000000 ____D () C:\Users\Annette\AppData\Local\CrashDumps
2015-04-18 11:55 - 2015-04-18 18:36 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieUserList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieSiteList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieBrowserModeList
2015-04-18 11:55 - 2015-04-18 11:55 - 00000177 _____ () C:\Windows\SysWOW64\SetupComponents.exe
2015-04-18 11:51 - 2015-04-18 18:27 - 00004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-18 11:45 - 2015-04-18 11:45 - 00003732 _____ () C:\Windows\System32\Tasks\SMupdate1
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-04-18 11:44 - 2015-04-18 21:02 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\SearchModule
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2015-04-18 11:44 - 2015-04-18 14:59 - 00000000 ____D () C:\Program Files\Common Files\Goobzo
2015-04-18 11:43 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\LiveUpdateWPP
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-18 11:42 - 2015-04-18 12:15 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2015-04-18 11:42 - 2015-04-18 12:14 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos
2015-04-18 11:42 - 2015-04-18 11:56 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos VPN
2015-04-18 11:41 - 2015-04-18 11:41 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\WebExtend
2015-04-18 11:36 - 2015-04-18 18:32 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\PalMall
2015-04-18 11:35 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 11:35 - 00003994 _____ () C:\Windows\System32\Tasks\LaunchPreSignup
2015-04-18 11:33 - 2015-04-18 19:16 - 00001362 _____ () C:\Windows\Tasks\OB.job
2015-04-18 11:33 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058
2015-04-18 11:33 - 2015-04-18 11:33 - 00004378 _____ () C:\Windows\System32\Tasks\OB
2015-04-18 11:32 - 2015-04-18 20:19 - 00001366 _____ () C:\Windows\Tasks\CBHT.job
2015-04-18 11:32 - 2015-04-18 11:32 - 00004382 _____ () C:\Windows\System32\Tasks\CBHT
2015-04-18 11:31 - 2015-04-18 13:54 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2015-04-18 11:26 - 2015-04-18 11:27 - 00000000 ____D () C:\Users\Annette\AppData\Local\SearchProtect
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 ____D () C:\bbc1ebbe-7ca3-40b2-9412-4351361b49be
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL226C.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL220E.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL21C0.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL20B6.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL2087.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL202A.tmp
2015-04-18 11:24 - 2015-04-18 11:25 - 00368128 _____ () C:\Users\Annette\Downloads\Setup.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-04-17 16:10 - 2015-04-17 16:10 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-17 16:10 - 2015-04-17 16:10 - 00000000 __SHD () C:\Users\Annette\AppData\Roaming\AnyProtectEx
2015-04-16 15:11 - 2015-04-16 15:11 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-16 15:09 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-16 15:09 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-16 15:09 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-16 15:09 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-16 15:09 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 15:09 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-16 15:09 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 15:09 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 15:09 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 15:09 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 15:09 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 15:09 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 15:09 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 15:09 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 15:09 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-16 15:09 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-16 15:09 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-16 15:09 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-16 15:09 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-16 15:09 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-16 15:08 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 15:08 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 15:08 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-16 15:06 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 15:06 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 15:06 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 15:06 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 15:06 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 15:06 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-16 15:06 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 15:06 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-16 15:06 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-16 15:06 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-16 15:06 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-16 15:06 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-16 15:06 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 15:06 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 15:06 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-16 15:06 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-16 15:05 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:15 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\SalesCuheCkeer
2015-04-13 10:15 - 2015-04-13 10:15 - 00000000 ____D () C:\Windows\Sun
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\GChat Pix
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\BetteRPriceCheC
2015-04-13 10:13 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\ShopperMastaer
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 15:32 - 2015-04-07 15:31 - 00333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-07 15:01 - 2015-04-18 15:00 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-18 15:00 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-07 14:58 - 2015-04-17 20:32 - 01203488 _____ () C:\Users\Annette\Downloads\Firefox - CHIP-Installer.exe
2015-04-07 13:54 - 2015-04-07 13:54 - 00000000 ____D () C:\ProgramData\e93af55400007372
2015-04-07 13:51 - 2015-04-07 13:51 - 00003166 _____ () C:\Windows\System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552}
2015-04-07 13:46 - 2015-04-18 20:28 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058
2015-04-07 13:43 - 2015-04-14 23:03 - 00000000 ____D () C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}
2015-04-07 13:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-07 13:41 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\mystartsearch
2015-04-07 13:31 - 2015-04-07 13:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\.minecraft
2015-04-07 13:29 - 2015-04-07 13:29 - 00000000 ____D () C:\ProgramData\d67f62e779954f0498e30aa3abc72476
2015-04-07 13:26 - 2015-04-07 13:26 - 00394480 _____ () C:\Users\Annette\Downloads\minecraft-Download.exe
2015-04-07 13:25 - 2015-04-07 13:25 - 00003336 _____ () C:\Windows\System32\Tasks\InfoCollect
2015-04-07 13:25 - 2015-04-07 13:25 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2015-04-07 13:24 - 2015-04-07 13:24 - 00001990 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2015-04-07 13:18 - 2015-04-07 13:18 - 554965182 _____ () C:\Windows\MEMORY.DMP
2015-04-07 13:18 - 2015-04-07 13:18 - 01005576 _____ () C:\Windows\Minidump\040715-37203-01.dmp
2015-04-07 13:18 - 2015-04-07 13:18 - 00000000 ____D () C:\Windows\Minidump
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-24 17:24 - 2015-03-24 17:24 - 00000000 ___RD () C:\Users\Annette\Documents\Notes
2015-03-23 20:13 - 2015-03-23 20:13 - 00000000 ____D () C:\Program Files (x86)\CommentBlocker
2015-03-23 19:53 - 2015-03-23 19:53 - 00000000 ____D () C:\Program Files (x86)\DiscoUnntLoCaetor
2015-03-23 19:34 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\shopnnDROP
2015-03-23 19:33 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\FleuxibleShopper
2015-03-22 19:36 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-22 19:05 - 2015-04-18 11:35 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-19 12:22 - 2015-03-19 12:22 - 00000197 _____ () C:\Windows\system32\2015-03-19-10-22-35.055-AvastVBoxSVC.exe-2544.log
2015-03-19 11:13 - 2015-03-19 11:13 - 00000197 _____ () C:\Windows\system32\2015-03-19-09-13-14.010-AvastVBoxSVC.exe-1768.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:20 - 2015-03-03 14:30 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Skype
2015-04-18 22:11 - 2015-02-10 11:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-18 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-18 21:13 - 2014-09-24 04:37 - 01941913 _____ () C:\Windows\WindowsUpdate.log
2015-04-18 21:05 - 2015-02-09 15:40 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3373016122-1355606172-358954014-1001
2015-04-18 20:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 18:49 - 2015-03-04 00:45 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1425422720
2015-04-18 18:48 - 2015-03-04 00:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-04-18 18:38 - 2015-02-25 10:48 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-18 18:36 - 2015-02-11 00:10 - 00000000 ___RD () C:\Users\Annette\Dropbox
2015-04-18 18:36 - 2015-02-10 23:10 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Dropbox
2015-04-18 18:35 - 2014-09-24 12:56 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-04-18 18:35 - 2014-09-24 12:56 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-04-18 18:35 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-18 18:27 - 2015-02-09 15:40 - 00000000 ___RD () C:\Users\Annette\OneDrive
2015-04-18 18:26 - 2013-08-22 16:46 - 00031330 _____ () C:\Windows\setupact.log
2015-04-18 18:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-18 18:22 - 2015-02-09 15:43 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4DFFAFA7-0D5D-4067-B8C2-01B53C26A2F5}
2015-04-18 18:08 - 2014-03-18 11:54 - 00836888 _____ () C:\Windows\PFRO.log
2015-04-18 17:54 - 2015-03-04 16:10 - 00005120 ___SH () C:\Users\Annette\Downloads\Thumbs.db
2015-04-18 17:27 - 2015-02-09 15:34 - 00001454 _____ () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-18 14:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-18 14:58 - 2015-02-09 15:33 - 00000000 ____D () C:\Users\Annette
2015-04-18 13:00 - 2015-02-10 11:13 - 00003938 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-04-18 12:52 - 2015-03-04 00:45 - 00001237 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-18 12:27 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-04-18 12:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-04-18 12:19 - 2014-07-25 23:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-04-18 12:19 - 2014-07-25 23:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-18 12:02 - 2015-02-09 15:36 - 00000000 ____D () C:\Users\Annette\AppData\Local\clear.fi
2015-04-18 11:55 - 2015-02-26 18:06 - 00236544 ___SH () C:\Users\Annette\Desktop\Thumbs.db
2015-04-18 11:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-18 11:32 - 2015-02-10 11:14 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-04-18 11:00 - 2015-02-13 16:02 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-17 20:32 - 2015-02-13 16:06 - 31512992 _____ (Oracle Corporation) C:\Users\Annette\Downloads\jre-7u15-windows-i586 (1).com
2015-04-17 17:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-17 15:51 - 2015-03-03 14:29 - 00000000 ____D () C:\ProgramData\Skype
2015-04-17 15:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-17 14:07 - 2015-02-13 15:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 14:07 - 2015-02-13 15:00 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 15:31 - 2015-02-12 16:37 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-16 15:23 - 2015-02-12 16:37 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-16 15:23 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 15:11 - 2015-02-10 11:25 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-14 01:24 - 2015-02-13 15:04 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-13 15:04 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 15:00 - 2015-02-11 00:10 - 00001080 _____ () C:\Users\Annette\Desktop\Dropbox.lnk
2015-04-13 15:00 - 2015-02-10 23:12 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-13 10:15 - 2015-03-10 20:11 - 00000000 ____D () C:\ProgramData\2126054686042568551
2015-04-07 14:14 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-07 13:47 - 2015-03-04 00:00 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\dlg
2015-04-07 13:24 - 2014-07-25 23:57 - 00000000 ___HD () C:\OEM
2015-04-07 13:23 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-07 13:18 - 2015-02-16 19:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-03-23 14:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-03-19 11:44 - 2015-03-03 23:44 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058
2015-03-19 11:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help

==================== Files in the root of some directories =======

2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-04-18 11:51 - 2015-04-18 18:27 - 0004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-17 16:10 - 2015-04-17 16:10 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-07 15:32 - 2015-04-07 15:31 - 0333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 14:58 - 2015-04-18 14:57 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 12:47 - 2015-04-18 12:47 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:24 - 2015-04-18 12:23 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2014-09-24 03:56 - 2014-09-24 03:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Annette\AppData\Local\Temp\2419.exe
C:\Users\Annette\AppData\Local\Temp\2A57E1ED-49E4-9BC7-9795-01829BC29989.dll
C:\Users\Annette\AppData\Local\Temp\2A57E1ED-49E4-9BC7-9795-01829BC29989.exe
C:\Users\Annette\AppData\Local\Temp\AnySendSetup_full.exe
C:\Users\Annette\AppData\Local\Temp\AOPSetup.exe
C:\Users\Annette\AppData\Local\Temp\D7F3C76B-35CA-5910-CB52-B7D8EB16A073.exe
C:\Users\Annette\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5t7tdn.dll
C:\Users\Annette\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpowpyxn.dll
C:\Users\Annette\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Annette\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Annette\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\Annette\AppData\Local\Temp\Intel_Technology_Access_Software.exe
C:\Users\Annette\AppData\Local\Temp\JavaRa.exe
C:\Users\Annette\AppData\Local\Temp\jli.dll
C:\Users\Annette\AppData\Local\Temp\jre-8u31-windows-i586.exe
C:\Users\Annette\AppData\Local\Temp\jre-8u31-windows-x64.exe
C:\Users\Annette\AppData\Local\Temp\jue15CC.exe
C:\Users\Annette\AppData\Local\Temp\jueD593.exe
C:\Users\Annette\AppData\Local\Temp\keytool.exe
C:\Users\Annette\AppData\Local\Temp\mccspuninstall.exe
C:\Users\Annette\AppData\Local\Temp\msvcr100.dll
C:\Users\Annette\AppData\Local\Temp\node.exe
C:\Users\Annette\AppData\Local\Temp\oct11B8.tmp.exe
C:\Users\Annette\AppData\Local\Temp\oct5717.tmp.exe
C:\Users\Annette\AppData\Local\Temp\oct616F.tmp.exe
C:\Users\Annette\AppData\Local\Temp\ReimageExpressSetup.exe
C:\Users\Annette\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Annette\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Annette\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Annette\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Annette\AppData\Local\Temp\setacl.exe
C:\Users\Annette\AppData\Local\Temp\SHSetup.exe
C:\Users\Annette\AppData\Local\Temp\sqlite3.exe
C:\Users\Annette\AppData\Local\Temp\supoptsetup.exe
C:\Users\Annette\AppData\Local\Temp\tu17p84.exe
C:\Users\Annette\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-17 17:11

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---


hI SORRY konnte nicht mehr schreiben mein pc hat sich total selbständig gemacht. Ich habe mir den avast runtergeladen und der ist durch gelaufen hat etliche win 32 und andere dinger gefunden. Habe alls gelöscht aber der avast zigt mir immet weiter bedrohungen an. Habe jetzt auch den Java runtergeworfen. Die logdatei habe ich hier reingsetzt aber si ist zu gross und mit zip usw habe ich garkeine ahnung lg Netty

hI SORRY konnte nicht mehr schreiben mein pc hat sich total selbständig gemacht. Ich habe mir den avast runtergeladen und der ist durch gelaufen hat etliche win 32 und andere dinger gefunden. Habe alls gelöscht aber der avast zigt mir immet weiter bedrohungen an. Habe jetzt auch den Java runtergeworfen. Die logdatei habe ich hier reingsetzt aber si ist zu gross und mit zip usw habe ich garkeine ahnung lg Netty

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01
Ran by Annette (administrator) on MAUSI1702PC on 18-04-2015 21:42:45
Running from C:\Users\Annette\Downloads
Loaded Profiles: Annette (Available profiles: Annette)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
() C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
() C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp
() C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp
() C:\Program Files (x86)\QuickRef_1.10.0.12\Service\qrsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
() C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Dropbox, Inc.) C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(iCinema) C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
() C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-10.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-10.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Cinema PlusV17.04) C:\Program Files (x86)\Cinema PlusV17.04-ntf\eccac44b-b825-4b67-a2cc-947a2db058b1-10.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
Failed to access process -> CCL.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\XTab\HPNotify.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebApp.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
( ) C:\Users\Annette\AppData\Local\Temp\nsa3477.tmp
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [217088 2014-06-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [66304 2015-03-18] (Acer Incorporated)
HKLM-x32\...\Run: [WinCheck] => C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058\bnsuFD9F.exe [193536 2015-04-17] ()
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2015-04-16] ()
HKLM-x32\...\RunOnce: [upgmsd_de_436.exe] => C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe [3308488 2015-04-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Annette\AppData\Roaming\ASPackage\ASPackage.exe /runonce
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.52\OptProLauncher.exe
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-04-12] ()
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-04-12] (Client Connect LTD)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50046;https=127.0.0.1:50046
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_coinis_15_07&cd=2XzuyEtN2Y1L1Qzu0CyEyDyEyEyE0D0FtCtCtCtCtB0CyDtBtN0D0Tzu0StCtCtAyCtN1L2XzutAtFyBtFyBtFyDtN1L1Czu tCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtB0FzzyBtAtDyBtGtByE0DyEtG0EyE0DtDtGtDzzzztDtGtD0A0F0DzztB0DyDyC0AtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByDzyyDtAtBtD 0FtGyB0BtB0EtGyEtDtB0DtG0ByEtAyBtGtBtCtBtBtC0AyEyCzy0BzzyC2Q&cr=877273299&ir=
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {7FCF1C48-0FA2-4932-89D5-6834E66CC742} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {8375696E-A674-4B0C-B3D7-D8A5059D8C6A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {ABCF9631-C248-4417-BBAF-0E7C9888C68A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F05C4836-A999-43C5-9C55-5C3D999E5683} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F11A6ACE-4F08-41F8-9FB5-764DE0EFB067} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
BHO: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
BHO-x32: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO-x32: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 02 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 03 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 04 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 16 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.facebook.com/?ref=tn_tnmn
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF user.js: detected! => C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\user.js [2015-04-18]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\bing-.xml [2015-03-03]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-images.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-maps.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\mystartsearch-1.xml [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\bingsearch.full@microsoft.com [2015-03-03]
FF Extension: BetteRPriceCheC - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\mRuPixfo@Q.org [2015-04-13]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\sparpilot@sparpilot.com [2015-04-07]
FF Extension: WEB.DE MailCheck - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\toolbar@web.de [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{091b6afa-55ed-d744-2edb-3f53f48efa6f} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{4dcd442b-c6b8-861d-356e-4e32f24e540d} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-09]
FF Extension: Adblock Plus - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-12]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (GoHD) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-04-18]
OPR Extension: (PalMall) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fjadmdmahkpbhgbmmkiiaanlnlekelmn [2015-04-18]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe istartsurf

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [22376 2015-01-08] ()
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94208 2014-05-06] () [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2749696 2015-03-18] (Acer Incorporated)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-04-12] (Client Connect LTD) [File not signed]
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 f8794fcc; c:\Program Files (x86)\Optimizer Pro 3.52\OptProMon.dll [2018856 2015-03-04] ()
R2 fogezyny; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp [185856 2015-04-07] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-26] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [93408 2015-02-08] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-06-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 lupuzyky; C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp [94720 2015-04-18] () [File not signed]
R2 pihofyby; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp [102912 2015-03-03] () [File not signed]
R2 popineje; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp [251904 2015-04-18] () [File not signed]
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R2 tycubyto; C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp [98304 2015-04-18] () [File not signed]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 zorevige; C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp [226304 2015-04-18] () [File not signed]
S4 fozududy; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\nsg81E1.tmpfs [X]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /svc [X] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] <==== ATTENTION
S3 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 aswSP; No ImagePath
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [110824 2014-06-11] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2014-10-30] (Intel Corporation)
S3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [573144 2014-04-18] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3468504 2014-05-22] (Realtek Semiconductor Corporation )
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:11 - 2015-04-18 22:11 - 00055104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cwovjymd.sys
2015-04-18 21:42 - 2015-04-18 21:52 - 00032636 _____ () C:\Users\Annette\Downloads\FRST.txt
2015-04-18 21:40 - 2015-04-18 21:45 - 00000000 ____D () C:\FRST
2015-04-18 21:33 - 2015-04-18 21:34 - 02098176 _____ (Farbar) C:\Users\Annette\Downloads\FRST64.exe
2015-04-18 20:00 - 2015-04-18 20:29 - 00000000 ____D () C:\Program Files\Reimage
2015-04-18 19:57 - 2015-04-18 20:29 - 00000158 _____ () C:\Windows\Reimage.ini
2015-04-18 19:55 - 2015-04-18 19:55 - 00768512 _____ (Reimage®) C:\Users\Annette\Downloads\ReimageRepair.exe
2015-04-18 19:15 - 2015-04-18 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer(1).exe
2015-04-18 19:02 - 2015-04-18 19:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer.exe
2015-04-18 17:35 - 2015-04-18 17:35 - 00000000 ____D () C:\Users\Annette\AppData\Local\Crossbrowse
2015-04-18 14:58 - 2015-04-18 14:57 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 13:32 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
2015-04-18 13:01 - 2015-04-18 13:01 - 00000000 ____D () C:\Users\Annette\SupTab
2015-04-18 13:00 - 2015-04-18 13:00 - 00003178 _____ () C:\Windows\System32\Tasks\Run_Browser
2015-04-18 12:59 - 2015-04-18 13:00 - 00000000 ____D () C:\Users\Annette\AppData\Local\UnicoBrowser
2015-04-18 12:55 - 2015-04-18 12:55 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-04-18 12:53 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\istartsurf
2015-04-18 12:47 - 2015-04-18 12:47 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 12:38 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\QuickRef_1.10.0.12
2015-04-18 12:32 - 2015-04-18 12:32 - 00000008 _____ () C:\END
2015-04-18 12:25 - 2015-04-18 12:25 - 00003114 _____ () C:\Windows\System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A}
2015-04-18 12:24 - 2015-04-18 12:23 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2015-04-18 12:19 - 2015-04-18 12:19 - 00001929 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-04-18 12:18 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GoHD
2015-04-18 12:17 - 2015-04-18 18:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\systweak
2015-04-18 12:17 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\SysWOW64\CCLOff.ini
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\system32\CCLOff.ini
2015-04-18 12:09 - 2015-04-18 22:25 - 00001366 _____ () C:\Windows\Tasks\AFCZ.job
2015-04-18 12:09 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\IGS
2015-04-18 12:09 - 2015-04-18 12:09 - 00004384 _____ () C:\Windows\System32\Tasks\AFCZ
2015-04-18 12:09 - 2015-04-16 09:20 - 00341696 _____ (CC Corporation) C:\Windows\SysWOW64\CCL.dll
2015-04-18 12:08 - 2015-04-18 12:08 - 00000000 ____D () C:\Users\Annette\AppData\Local\Macromedia
2015-04-18 12:07 - 2015-04-18 19:55 - 00001370 _____ () C:\Windows\Tasks\EWSRRH.job
2015-04-18 12:07 - 2015-04-18 12:07 - 00004386 _____ () C:\Windows\System32\Tasks\EWSRRH
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Users\Annette\AppData\Local\globalUpdate
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV17.04-ntf
2015-04-18 12:06 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-04-18 12:05 - 2015-04-18 12:05 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
2015-04-18 12:03 - 2015-04-18 20:37 - 00000000 ____D () C:\Users\Annette\AppData\Local\BrowserHelper
2015-04-18 12:02 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Local\SmartWeb
2015-04-18 12:01 - 2015-04-18 19:56 - 00000000 ____D () C:\Program Files (x86)\Infonaut_1.10.0.14
2015-04-18 12:00 - 2015-04-18 20:30 - 00000000 ____D () C:\Users\Annette\AppData\Local\gmsd_de_436
2015-04-18 12:00 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_436
2015-04-18 11:58 - 2015-04-18 20:01 - 00000000 ____D () C:\Users\Annette\AppData\Local\CrashDumps
2015-04-18 11:55 - 2015-04-18 18:36 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieUserList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieSiteList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieBrowserModeList
2015-04-18 11:55 - 2015-04-18 11:55 - 00000177 _____ () C:\Windows\SysWOW64\SetupComponents.exe
2015-04-18 11:51 - 2015-04-18 18:27 - 00004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-18 11:45 - 2015-04-18 11:45 - 00003732 _____ () C:\Windows\System32\Tasks\SMupdate1
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-04-18 11:44 - 2015-04-18 21:02 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\SearchModule
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2015-04-18 11:44 - 2015-04-18 14:59 - 00000000 ____D () C:\Program Files\Common Files\Goobzo
2015-04-18 11:43 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\LiveUpdateWPP
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-18 11:42 - 2015-04-18 12:15 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2015-04-18 11:42 - 2015-04-18 12:14 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos
2015-04-18 11:42 - 2015-04-18 11:56 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos VPN
2015-04-18 11:41 - 2015-04-18 11:41 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\WebExtend
2015-04-18 11:36 - 2015-04-18 18:32 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\PalMall
2015-04-18 11:35 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 11:35 - 00003994 _____ () C:\Windows\System32\Tasks\LaunchPreSignup
2015-04-18 11:33 - 2015-04-18 19:16 - 00001362 _____ () C:\Windows\Tasks\OB.job
2015-04-18 11:33 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058
2015-04-18 11:33 - 2015-04-18 11:33 - 00004378 _____ () C:\Windows\System32\Tasks\OB
2015-04-18 11:32 - 2015-04-18 20:19 - 00001366 _____ () C:\Windows\Tasks\CBHT.job
2015-04-18 11:32 - 2015-04-18 11:32 - 00004382 _____ () C:\Windows\System32\Tasks\CBHT
2015-04-18 11:31 - 2015-04-18 13:54 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2015-04-18 11:26 - 2015-04-18 11:27 - 00000000 ____D () C:\Users\Annette\AppData\Local\SearchProtect
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 ____D () C:\bbc1ebbe-7ca3-40b2-9412-4351361b49be
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL226C.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL220E.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL21C0.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL20B6.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL2087.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL202A.tmp
2015-04-18 11:24 - 2015-04-18 11:25 - 00368128 _____ () C:\Users\Annette\Downloads\Setup.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-04-17 16:10 - 2015-04-17 16:10 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-17 16:10 - 2015-04-17 16:10 - 00000000 __SHD () C:\Users\Annette\AppData\Roaming\AnyProtectEx
2015-04-16 15:11 - 2015-04-16 15:11 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-16 15:09 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-16 15:09 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-16 15:09 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-16 15:09 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-16 15:09 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 15:09 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-16 15:09 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 15:09 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 15:09 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 15:09 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 15:09 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 15:09 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 15:09 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 15:09 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 15:09 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-16 15:09 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-16 15:09 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-16 15:09 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-16 15:09 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-16 15:09 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-16 15:08 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 15:08 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 15:08 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-16 15:06 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 15:06 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 15:06 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 15:06 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 15:06 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 15:06 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-16 15:06 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 15:06 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-16 15:06 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-16 15:06 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-16 15:06 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-16 15:06 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-16 15:06 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 15:06 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 15:06 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-16 15:06 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-16 15:05 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:15 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\SalesCuheCkeer
2015-04-13 10:15 - 2015-04-13 10:15 - 00000000 ____D () C:\Windows\Sun
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\GChat Pix
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\BetteRPriceCheC
2015-04-13 10:13 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\ShopperMastaer
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 15:32 - 2015-04-07 15:31 - 00333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-07 15:01 - 2015-04-18 15:00 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-18 15:00 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-07 14:58 - 2015-04-17 20:32 - 01203488 _____ () C:\Users\Annette\Downloads\Firefox - CHIP-Installer.exe
2015-04-07 13:54 - 2015-04-07 13:54 - 00000000 ____D () C:\ProgramData\e93af55400007372
2015-04-07 13:51 - 2015-04-07 13:51 - 00003166 _____ () C:\Windows\System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552}
2015-04-07 13:46 - 2015-04-18 20:28 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058
2015-04-07 13:43 - 2015-04-14 23:03 - 00000000 ____D () C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}
2015-04-07 13:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-07 13:41 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\mystartsearch
2015-04-07 13:31 - 2015-04-07 13:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\.minecraft
2015-04-07 13:29 - 2015-04-07 13:29 - 00000000 ____D () C:\ProgramData\d67f62e779954f0498e30aa3abc72476
2015-04-07 13:26 - 2015-04-07 13:26 - 00394480 _____ () C:\Users\Annette\Downloads\minecraft-Download.exe
2015-04-07 13:25 - 2015-04-07 13:25 - 00003336 _____ () C:\Windows\System32\Tasks\InfoCollect
2015-04-07 13:25 - 2015-04-07 13:25 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2015-04-07 13:24 - 2015-04-07 13:24 - 00001990 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2015-04-07 13:18 - 2015-04-07 13:18 - 554965182 _____ () C:\Windows\MEMORY.DMP
2015-04-07 13:18 - 2015-04-07 13:18 - 01005576 _____ () C:\Windows\Minidump\040715-37203-01.dmp
2015-04-07 13:18 - 2015-04-07 13:18 - 00000000 ____D () C:\Windows\Minidump
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-24 17:24 - 2015-03-24 17:24 - 00000000 ___RD () C:\Users\Annette\Documents\Notes
2015-03-23 20:13 - 2015-03-23 20:13 - 00000000 ____D () C:\Program Files (x86)\CommentBlocker
2015-03-23 19:53 - 2015-03-23 19:53 - 00000000 ____D () C:\Program Files (x86)\DiscoUnntLoCaetor
2015-03-23 19:34 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\shopnnDROP
2015-03-23 19:33 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\FleuxibleShopper
2015-03-22 19:36 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-22 19:05 - 2015-04-18 11:35 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-19 12:22 - 2015-03-19 12:22 - 00000197 _____ () C:\Windows\system32\2015-03-19-10-22-35.055-AvastVBoxSVC.exe-2544.log
2015-03-19 11:13 - 2015-03-19 11:13 - 00000197 _____ () C:\Windows\system32\2015-03-19-09-13-14.010-AvastVBoxSVC.exe-1768.log


Alt 21.04.2015, 10:49   #6
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-04-2015 01
Ran by Annette (administrator) on MAUSI1702PC on 18-04-2015 21:42:45
Running from C:\Users\Annette\Downloads
Loaded Profiles: Annette (Available profiles: Annette)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
() C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
() C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp
() C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp
() C:\Program Files (x86)\QuickRef_1.10.0.12\Service\qrsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
() C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Dropbox, Inc.) C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(iCinema) C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
() C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-10.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(InstallMoon) C:\Program Files (x86)\GoHD\8cb3e5f0-d14f-4811-afbb-496fc9ab8c98-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-1-6.exe
(BND) C:\Program Files (x86)\PalMall\7e0c8f1a-041f-4b28-9c69-165dde7038f0-10.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Cinema PlusV17.04) C:\Program Files (x86)\Cinema PlusV17.04-ntf\eccac44b-b825-4b67-a2cc-947a2db058b1-10.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
Failed to access process -> CCL.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\XTab\HPNotify.exe
(SoftBrain Technologies Ltd.) C:\Users\Annette\AppData\Local\SmartWeb\SmartWebApp.exe
(Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(                                                            ) C:\Users\Annette\AppData\Local\Temp\nsa3477.tmp
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp
() C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [217088 2014-06-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [66304 2015-03-18] (Acer Incorporated)
HKLM-x32\...\Run: [WinCheck] => C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058\bnsuFD9F.exe [193536 2015-04-17] ()
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2015-04-16] ()
HKLM-x32\...\RunOnce: [upgmsd_de_436.exe] => C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe [3308488 2015-04-16] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Annette\AppData\Roaming\ASPackage\ASPackage.exe /runonce
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.52\OptProLauncher.exe
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-04-12] ()
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-04-12] (Client Connect LTD)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50046;https=127.0.0.1:50046
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_coinis_15_07&cd=2XzuyEtN2Y1L1Qzu0CyEyDyEyEyE0D0FtCtCtCtCtB0CyDtBtN0D0Tzu0StCtCtAyCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtB0FzzyBtAtDyBtGtByE0DyEtG0EyE0DtDtGtDzzzztDtGtD0A0F0DzztB0DyDyC0AtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyByDzyyDtAtBtD0FtGyB0BtB0EtGyEtDtB0DtG0ByEtAyBtGtBtCtBtBtC0AyEyCzy0BzzyC2Q&cr=877273299&ir=
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1429354366&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&q={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {7FCF1C48-0FA2-4932-89D5-6834E66CC742} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {8375696E-A674-4B0C-B3D7-D8A5059D8C6A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {9008D51D-8C79-435E-94EE-2A3C911859C7} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {ABCF9631-C248-4417-BBAF-0E7C9888C68A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F05C4836-A999-43C5-9C55-5C3D999E5683} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3373016122-1355606172-358954014-1001 -> {F11A6ACE-4F08-41F8-9FB5-764DE0EFB067} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=WDCXWD10JPVX-22JC3T0_WD-WXA1A644RT524RT52&ts=1429354483&type=default&q={searchTerms}
BHO: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} ->  No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: No Name -> {278d28be-ad0d-46ba-9951-4104b6c427f2} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
BHO-x32: No Name -> {b91eb585-a676-48e7-8c7f-3e12deaa2439} ->  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-13] (Oracle Corporation)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2014-04-23] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 02 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 03 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 04 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Winsock: Catalog9 16 C:\Windows\SysWOW64\CCL.dll [341696] (CC Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.facebook.com/?ref=tn_tnmn
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2015-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-13] (Oracle Corporation)
FF user.js: detected! => C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\user.js [2015-04-18]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\bing-.xml [2015-03-03]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-images.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\google-maps.xml [2015-02-13]
FF SearchPlugin: C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\searchplugins\mystartsearch-1.xml [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\bingsearch.full@microsoft.com [2015-03-03]
FF Extension: BetteRPriceCheC - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\mRuPixfo@Q.org [2015-04-13]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\sparpilot@sparpilot.com [2015-04-07]
FF Extension: WEB.DE MailCheck - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\toolbar@web.de [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{091b6afa-55ed-d744-2edb-3f53f48efa6f} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{4dcd442b-c6b8-861d-356e-4e32f24e540d} [2015-04-18]
FF Extension: No Name - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-02-09]
FF Extension: Adblock Plus - C:\Users\Annette\AppData\Roaming\Mozilla\Firefox\Profiles\vqdcqqkq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-12]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKU\S-1-5-21-3373016122-1355606172-358954014-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - hxxp://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (GoHD) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-04-18]
OPR Extension: (PalMall) - C:\Users\Annette\AppData\Roaming\Opera Software\Opera Stable\Extensions\fjadmdmahkpbhgbmmkiiaanlnlekelmn [2015-04-18]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe istartsurf

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [22376 2015-01-08] ()
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [94208 2014-05-06] () [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2749696 2015-03-18] (Acer Incorporated)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-04-12] (Client Connect LTD) [File not signed]
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 f8794fcc; c:\Program Files (x86)\Optimizer Pro 3.52\OptProMon.dll [2018856 2015-03-04] ()
R2 fogezyny; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp [185856 2015-04-07] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-26] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [93408 2015-02-08] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-06-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 lupuzyky; C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp [94720 2015-04-18] () [File not signed]
R2 pihofyby; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp [102912 2015-03-03] () [File not signed]
R2 popineje; C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nsz78F6.tmp [251904 2015-04-18] () [File not signed]
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R2 tycubyto; C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp [98304 2015-04-18] () [File not signed]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 zorevige; C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp [226304 2015-04-18] () [File not signed]
S4 fozududy; C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\nsg81E1.tmpfs [X]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /svc [X] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] <==== ATTENTION
S3 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 aswSP; No ImagePath
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [110824 2014-06-11] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2014-10-30] (Intel Corporation)
S3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [573144 2014-04-18] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3468504 2014-05-22] (Realtek Semiconductor Corporation                           )
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:11 - 2015-04-18 22:11 - 00055104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cwovjymd.sys
2015-04-18 21:42 - 2015-04-18 21:52 - 00032636 _____ () C:\Users\Annette\Downloads\FRST.txt
2015-04-18 21:40 - 2015-04-18 21:45 - 00000000 ____D () C:\FRST
2015-04-18 21:33 - 2015-04-18 21:34 - 02098176 _____ (Farbar) C:\Users\Annette\Downloads\FRST64.exe
2015-04-18 20:00 - 2015-04-18 20:29 - 00000000 ____D () C:\Program Files\Reimage
2015-04-18 19:57 - 2015-04-18 20:29 - 00000158 _____ () C:\Windows\Reimage.ini
2015-04-18 19:55 - 2015-04-18 19:55 - 00768512 _____ (Reimage®) C:\Users\Annette\Downloads\ReimageRepair.exe
2015-04-18 19:15 - 2015-04-18 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer(1).exe
2015-04-18 19:02 - 2015-04-18 19:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Annette\Downloads\SpyHunter-installer.exe
2015-04-18 17:35 - 2015-04-18 17:35 - 00000000 ____D () C:\Users\Annette\AppData\Local\Crossbrowse
2015-04-18 14:58 - 2015-04-18 14:57 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 13:32 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\I - Cinema
2015-04-18 13:01 - 2015-04-18 13:01 - 00000000 ____D () C:\Users\Annette\SupTab
2015-04-18 13:00 - 2015-04-18 13:00 - 00003178 _____ () C:\Windows\System32\Tasks\Run_Browser
2015-04-18 12:59 - 2015-04-18 13:00 - 00000000 ____D () C:\Users\Annette\AppData\Local\UnicoBrowser
2015-04-18 12:55 - 2015-04-18 12:55 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-04-18 12:53 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\istartsurf
2015-04-18 12:47 - 2015-04-18 12:47 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 12:38 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\QuickRef_1.10.0.12
2015-04-18 12:32 - 2015-04-18 12:32 - 00000008 _____ () C:\END
2015-04-18 12:25 - 2015-04-18 12:25 - 00003114 _____ () C:\Windows\System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A}
2015-04-18 12:24 - 2015-04-18 12:23 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2015-04-18 12:19 - 2015-04-18 12:19 - 00001929 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-04-18 12:18 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GoHD
2015-04-18 12:17 - 2015-04-18 18:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\systweak
2015-04-18 12:17 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\SysWOW64\CCLOff.ini
2015-04-18 12:10 - 2015-04-18 17:30 - 00008688 _____ () C:\Windows\system32\CCLOff.ini
2015-04-18 12:09 - 2015-04-18 22:25 - 00001366 _____ () C:\Windows\Tasks\AFCZ.job
2015-04-18 12:09 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\IGS
2015-04-18 12:09 - 2015-04-18 12:09 - 00004384 _____ () C:\Windows\System32\Tasks\AFCZ
2015-04-18 12:09 - 2015-04-16 09:20 - 00341696 _____ (CC Corporation) C:\Windows\SysWOW64\CCL.dll
2015-04-18 12:08 - 2015-04-18 12:08 - 00000000 ____D () C:\Users\Annette\AppData\Local\Macromedia
2015-04-18 12:07 - 2015-04-18 19:55 - 00001370 _____ () C:\Windows\Tasks\EWSRRH.job
2015-04-18 12:07 - 2015-04-18 12:07 - 00004386 _____ () C:\Windows\System32\Tasks\EWSRRH
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Users\Annette\AppData\Local\globalUpdate
2015-04-18 12:07 - 2015-04-18 12:07 - 00000000 ____D () C:\Program Files (x86)\Cinema PlusV17.04-ntf
2015-04-18 12:06 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-04-18 12:05 - 2015-04-18 12:05 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
2015-04-18 12:03 - 2015-04-18 20:37 - 00000000 ____D () C:\Users\Annette\AppData\Local\BrowserHelper
2015-04-18 12:02 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Local\SmartWeb
2015-04-18 12:01 - 2015-04-18 19:56 - 00000000 ____D () C:\Program Files (x86)\Infonaut_1.10.0.14
2015-04-18 12:00 - 2015-04-18 20:30 - 00000000 ____D () C:\Users\Annette\AppData\Local\gmsd_de_436
2015-04-18 12:00 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\gmsd_de_436
2015-04-18 11:58 - 2015-04-18 20:01 - 00000000 ____D () C:\Users\Annette\AppData\Local\CrashDumps
2015-04-18 11:55 - 2015-04-18 18:36 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieUserList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieSiteList
2015-04-18 11:55 - 2015-04-18 11:59 - 00000000 __SHD () C:\Users\Annette\AppData\Local\EmieBrowserModeList
2015-04-18 11:55 - 2015-04-18 11:55 - 00000177 _____ () C:\Windows\SysWOW64\SetupComponents.exe
2015-04-18 11:51 - 2015-04-18 18:27 - 00004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-18 11:45 - 2015-04-18 11:45 - 00003732 _____ () C:\Windows\System32\Tasks\SMupdate1
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-04-18 11:45 - 2015-04-18 11:45 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-04-18 11:44 - 2015-04-18 21:02 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\SearchModule
2015-04-18 11:44 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2015-04-18 11:44 - 2015-04-18 14:59 - 00000000 ____D () C:\Program Files\Common Files\Goobzo
2015-04-18 11:43 - 2015-04-18 19:55 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\LiveUpdateWPP
2015-04-18 11:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\GUPlayer
2015-04-18 11:42 - 2015-04-18 12:15 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2015-04-18 11:42 - 2015-04-18 12:14 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos
2015-04-18 11:42 - 2015-04-18 11:56 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Steganos VPN
2015-04-18 11:41 - 2015-04-18 11:41 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\WebExtend
2015-04-18 11:36 - 2015-04-18 18:32 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\PalMall
2015-04-18 11:35 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058
2015-04-18 11:35 - 2015-04-18 11:35 - 00003994 _____ () C:\Windows\System32\Tasks\LaunchPreSignup
2015-04-18 11:33 - 2015-04-18 19:16 - 00001362 _____ () C:\Windows\Tasks\OB.job
2015-04-18 11:33 - 2015-04-18 11:48 - 00000000 ____D () C:\Users\Annette\AppData\Local\935477DA-1429356802-8B48-BF00-00E0B8543058
2015-04-18 11:33 - 2015-04-18 11:33 - 00004378 _____ () C:\Windows\System32\Tasks\OB
2015-04-18 11:32 - 2015-04-18 20:19 - 00001366 _____ () C:\Windows\Tasks\CBHT.job
2015-04-18 11:32 - 2015-04-18 11:32 - 00004382 _____ () C:\Windows\System32\Tasks\CBHT
2015-04-18 11:31 - 2015-04-18 13:54 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2015-04-18 11:26 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2015-04-18 11:26 - 2015-04-18 11:27 - 00000000 ____D () C:\Users\Annette\AppData\Local\SearchProtect
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 ____D () C:\bbc1ebbe-7ca3-40b2-9412-4351361b49be
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL226C.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL220E.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL21C0.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL20B6.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL2087.tmp
2015-04-18 11:25 - 2015-04-18 11:25 - 00000000 _____ () C:\LIL202A.tmp
2015-04-18 11:24 - 2015-04-18 11:25 - 00368128 _____ () C:\Users\Annette\Downloads\Setup.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-04-18 11:00 - 2015-02-13 16:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-04-17 16:10 - 2015-04-17 16:10 - 00613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-17 16:10 - 2015-04-17 16:10 - 00000000 __SHD () C:\Users\Annette\AppData\Roaming\AnyProtectEx
2015-04-16 15:11 - 2015-04-16 15:11 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 15:09 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-16 15:09 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-16 15:09 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-16 15:09 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-16 15:09 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-16 15:09 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-16 15:09 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-16 15:09 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-16 15:09 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-16 15:09 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-16 15:09 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 15:09 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 15:09 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 15:09 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-16 15:09 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 15:09 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 15:09 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 15:09 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 15:09 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 15:09 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-16 15:09 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-16 15:09 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-16 15:09 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-16 15:09 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-16 15:09 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-16 15:09 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-16 15:09 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-16 15:08 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 15:08 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 15:08 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-16 15:08 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-16 15:08 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 15:08 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 15:08 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 15:08 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-16 15:06 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 15:06 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 15:06 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 15:06 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 15:06 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 15:06 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-16 15:06 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 15:06 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-16 15:06 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 15:06 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-16 15:06 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-16 15:06 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-16 15:06 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-16 15:06 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-16 15:06 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-16 15:06 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-16 15:06 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 15:06 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-16 15:06 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-16 15:05 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 15:05 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-13 10:15 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\SalesCuheCkeer
2015-04-13 10:15 - 2015-04-13 10:15 - 00000000 ____D () C:\Windows\Sun
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\GChat Pix
2015-04-13 10:14 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\BetteRPriceCheC
2015-04-13 10:13 - 2015-04-16 16:18 - 00000000 ____D () C:\Program Files (x86)\ShopperMastaer
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-08 10:45 - 2015-04-08 10:45 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-07 15:32 - 2015-04-07 15:31 - 00333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-07 15:01 - 2015-04-18 15:00 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-18 15:00 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-07 15:01 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-07 14:58 - 2015-04-17 20:32 - 01203488 _____ () C:\Users\Annette\Downloads\Firefox - CHIP-Installer.exe
2015-04-07 13:54 - 2015-04-07 13:54 - 00000000 ____D () C:\ProgramData\e93af55400007372
2015-04-07 13:51 - 2015-04-07 13:51 - 00003166 _____ () C:\Windows\System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552}
2015-04-07 13:46 - 2015-04-18 20:28 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058
2015-04-07 13:43 - 2015-04-14 23:03 - 00000000 ____D () C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}
2015-04-07 13:42 - 2015-04-18 19:55 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-07 13:41 - 2015-04-18 19:55 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\mystartsearch
2015-04-07 13:31 - 2015-04-07 13:48 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\.minecraft
2015-04-07 13:29 - 2015-04-07 13:29 - 00000000 ____D () C:\ProgramData\d67f62e779954f0498e30aa3abc72476
2015-04-07 13:26 - 2015-04-07 13:26 - 00394480 _____ () C:\Users\Annette\Downloads\minecraft-Download.exe
2015-04-07 13:25 - 2015-04-07 13:25 - 00003336 _____ () C:\Windows\System32\Tasks\InfoCollect
2015-04-07 13:25 - 2015-04-07 13:25 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2015-04-07 13:24 - 2015-04-07 13:24 - 00001990 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2015-04-07 13:18 - 2015-04-07 13:18 - 554965182 _____ () C:\Windows\MEMORY.DMP
2015-04-07 13:18 - 2015-04-07 13:18 - 01005576 _____ () C:\Windows\Minidump\040715-37203-01.dmp
2015-04-07 13:18 - 2015-04-07 13:18 - 00000000 ____D () C:\Windows\Minidump
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-03-26 21:14 - 2015-03-26 21:14 - 00004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-24 17:24 - 2015-03-24 17:24 - 00000000 ___RD () C:\Users\Annette\Documents\Notes
2015-03-23 20:13 - 2015-03-23 20:13 - 00000000 ____D () C:\Program Files (x86)\CommentBlocker
2015-03-23 19:53 - 2015-03-23 19:53 - 00000000 ____D () C:\Program Files (x86)\DiscoUnntLoCaetor
2015-03-23 19:34 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\shopnnDROP
2015-03-23 19:33 - 2015-04-07 14:46 - 00000000 ____D () C:\Program Files (x86)\FleuxibleShopper
2015-03-22 19:36 - 2015-04-07 15:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-22 19:05 - 2015-04-18 11:35 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-19 12:22 - 2015-03-19 12:22 - 00000197 _____ () C:\Windows\system32\2015-03-19-10-22-35.055-AvastVBoxSVC.exe-2544.log
2015-03-19 11:13 - 2015-03-19 11:13 - 00000197 _____ () C:\Windows\system32\2015-03-19-09-13-14.010-AvastVBoxSVC.exe-1768.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-18 22:20 - 2015-03-03 14:30 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Skype
2015-04-18 22:11 - 2015-02-10 11:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-18 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-18 21:13 - 2014-09-24 04:37 - 01941913 _____ () C:\Windows\WindowsUpdate.log
2015-04-18 21:05 - 2015-02-09 15:40 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3373016122-1355606172-358954014-1001
2015-04-18 20:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 18:49 - 2015-03-04 00:45 - 00003860 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1425422720
2015-04-18 18:48 - 2015-03-04 00:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-04-18 18:38 - 2015-02-25 10:48 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-18 18:36 - 2015-02-11 00:10 - 00000000 ___RD () C:\Users\Annette\Dropbox
2015-04-18 18:36 - 2015-02-10 23:10 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Dropbox
2015-04-18 18:35 - 2014-09-24 12:56 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-04-18 18:35 - 2014-09-24 12:56 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-04-18 18:35 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-18 18:27 - 2015-02-09 15:40 - 00000000 ___RD () C:\Users\Annette\OneDrive
2015-04-18 18:26 - 2013-08-22 16:46 - 00031330 _____ () C:\Windows\setupact.log
2015-04-18 18:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-18 18:22 - 2015-02-09 15:43 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4DFFAFA7-0D5D-4067-B8C2-01B53C26A2F5}
2015-04-18 18:08 - 2014-03-18 11:54 - 00836888 _____ () C:\Windows\PFRO.log
2015-04-18 17:54 - 2015-03-04 16:10 - 00005120 ___SH () C:\Users\Annette\Downloads\Thumbs.db
2015-04-18 17:27 - 2015-02-09 15:34 - 00001454 _____ () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-18 14:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-18 14:58 - 2015-02-09 15:33 - 00000000 ____D () C:\Users\Annette
2015-04-18 13:00 - 2015-02-10 11:13 - 00003938 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2015-04-18 12:52 - 2015-03-04 00:45 - 00001237 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-18 12:27 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-04-18 12:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-04-18 12:19 - 2014-07-25 23:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-04-18 12:19 - 2014-07-25 23:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-18 12:02 - 2015-02-09 15:36 - 00000000 ____D () C:\Users\Annette\AppData\Local\clear.fi
2015-04-18 11:55 - 2015-02-26 18:06 - 00236544 ___SH () C:\Users\Annette\Desktop\Thumbs.db
2015-04-18 11:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2015-04-18 11:32 - 2015-02-10 11:14 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-04-18 11:00 - 2015-02-13 16:02 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-17 20:32 - 2015-02-13 16:06 - 31512992 _____ (Oracle Corporation) C:\Users\Annette\Downloads\jre-7u15-windows-i586 (1).com
2015-04-17 17:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-17 15:51 - 2015-03-03 14:29 - 00000000 ____D () C:\ProgramData\Skype
2015-04-17 15:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-17 14:07 - 2015-02-13 15:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 14:07 - 2015-02-13 15:00 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 15:31 - 2015-02-12 16:37 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-16 15:23 - 2015-02-12 16:37 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-16 15:23 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 15:11 - 2015-02-10 11:25 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-14 01:24 - 2015-02-13 15:04 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-13 15:04 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 15:00 - 2015-02-11 00:10 - 00001080 _____ () C:\Users\Annette\Desktop\Dropbox.lnk
2015-04-13 15:00 - 2015-02-10 23:12 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-13 10:15 - 2015-03-10 20:11 - 00000000 ____D () C:\ProgramData\2126054686042568551
2015-04-07 14:14 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-07 13:47 - 2015-03-04 00:00 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\dlg
2015-04-07 13:24 - 2014-07-25 23:57 - 00000000 ___HD () C:\OEM
2015-04-07 13:23 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-07 13:18 - 2015-02-16 19:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-03-23 14:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-03-19 11:44 - 2015-03-03 23:44 - 00000000 ____D () C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058
2015-03-19 11:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help

==================== Files in the root of some directories =======

2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Annette\AppData\Roaming\AFCZ
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Annette\AppData\Roaming\CBHT
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Annette\AppData\Roaming\EWSRRH
2015-03-26 21:14 - 2015-03-26 21:14 - 0004185 _____ () C:\Users\Annette\AppData\Roaming\OB
2015-04-18 11:51 - 2015-04-18 18:27 - 0004840 _____ () C:\Users\Annette\AppData\Local\BTServer.log
2015-04-17 16:10 - 2015-04-17 16:10 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsa887A.tmp
2015-04-07 15:32 - 2015-04-07 15:31 - 0333503 _____ (AnySend.com) C:\Users\Annette\AppData\Local\nsfFD0B.tmp
2015-04-18 12:42 - 2015-04-18 12:42 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp46BA.tmp
2015-04-18 14:58 - 2015-04-18 14:57 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsp66CA.tmp
2015-04-18 12:47 - 2015-04-18 12:47 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsvCCD8.tmp
2015-04-18 12:24 - 2015-04-18 12:23 - 0613255 _____ (CMI Limited) C:\Users\Annette\AppData\Local\nsx96A2.tmp
2014-09-24 03:56 - 2014-09-24 03:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Annette\AppData\Local\Temp\2419.exe
C:\Users\Annette\AppData\Local\Temp\2A57E1ED-49E4-9BC7-9795-01829BC29989.dll
C:\Users\Annette\AppData\Local\Temp\2A57E1ED-49E4-9BC7-9795-01829BC29989.exe
C:\Users\Annette\AppData\Local\Temp\AnySendSetup_full.exe
C:\Users\Annette\AppData\Local\Temp\AOPSetup.exe
C:\Users\Annette\AppData\Local\Temp\D7F3C76B-35CA-5910-CB52-B7D8EB16A073.exe
C:\Users\Annette\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5t7tdn.dll
C:\Users\Annette\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpowpyxn.dll
C:\Users\Annette\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Annette\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Annette\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\Annette\AppData\Local\Temp\Intel_Technology_Access_Software.exe
C:\Users\Annette\AppData\Local\Temp\JavaRa.exe
C:\Users\Annette\AppData\Local\Temp\jli.dll
C:\Users\Annette\AppData\Local\Temp\jre-8u31-windows-i586.exe
C:\Users\Annette\AppData\Local\Temp\jre-8u31-windows-x64.exe
C:\Users\Annette\AppData\Local\Temp\jue15CC.exe
C:\Users\Annette\AppData\Local\Temp\jueD593.exe
C:\Users\Annette\AppData\Local\Temp\keytool.exe
C:\Users\Annette\AppData\Local\Temp\mccspuninstall.exe
C:\Users\Annette\AppData\Local\Temp\msvcr100.dll
C:\Users\Annette\AppData\Local\Temp\node.exe
C:\Users\Annette\AppData\Local\Temp\oct11B8.tmp.exe
C:\Users\Annette\AppData\Local\Temp\oct5717.tmp.exe
C:\Users\Annette\AppData\Local\Temp\oct616F.tmp.exe
C:\Users\Annette\AppData\Local\Temp\ReimageExpressSetup.exe
C:\Users\Annette\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Annette\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Annette\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Annette\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Annette\AppData\Local\Temp\setacl.exe
C:\Users\Annette\AppData\Local\Temp\SHSetup.exe
C:\Users\Annette\AppData\Local\Temp\sqlite3.exe
C:\Users\Annette\AppData\Local\Temp\supoptsetup.exe
C:\Users\Annette\AppData\Local\Temp\tu17p84.exe
C:\Users\Annette\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-17 17:11

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---


hoffe das war so richtig

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version: - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version: - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version: - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version: - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version: - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

Code:
ATTFilter
==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============
Code:
ATTFilter
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Alt 21.04.2015, 10:52   #7
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Code:
ATTFilter
Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

Alt 21.04.2015, 10:53   #8
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Code:
ATTFilter
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================

Alt 21.04.2015, 15:36   #9
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Code:
ATTFilter
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTIONAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 18-04-2015 01
Ran by Annette at 2015-04-18 22:34:19
Running from C:\Users\Annette\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.07.2004.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.02.2003.0 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2000 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.06.2002.2 - Acer Incorporated)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CommentBlocker (HKLM-x32\...\{439763FF-59EC-FF1D-B0B5-CB9E213A7A5C}) (Version:  - "") <==== ATTENTION
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
DiscoUnntLoCaetor (HKLM-x32\...\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}) (Version:  - DiscountLocator) <==== ATTENTION
Dropbox (HKU\S-1-5-21-3373016122-1355606172-358954014-1001\...\Dropbox) (Version: 3.4.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
FleuxibleShopper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibleShopper) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Free YouTube to MP3 Converter version 3.12.54.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.54.128 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{1c3caad7-d0ad-4f7c-87e0-f47627304993}) (Version: 1.3.3.1036 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{43FA4AC8-46F8-423F-96FD-9A7D67048F1C}) (Version: 2.5.1634 - Intel Corporation)
Java 7 Update 15 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
Opera Stable 28.0.1750.48 (HKLM-x32\...\Opera 28.0.1750.48) (Version: 28.0.1750.48 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION
shopnnDROP (HKLM-x32\...\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1}) (Version:  - "") <==== ATTENTION
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
WSE_Binkiland (HKLM-x32\...\WSE_Binkiland) (Version:  - WSE_Binkiland) <==== ATTENTION!

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3373016122-1355606172-358954014-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Annette\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points  =========================

24-03-2015 17:09:56 avast! antivirus system restore point
04-04-2015 23:26:00 Intel(R) Technology Access
07-04-2015 13:20:26 Intel(R) Technology Access
16-04-2015 15:17:54 Windows Update
18-04-2015 10:59:38 Installed Java 7 Update 15

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {026280A5-F714-4617-BBBC-5A16D78D6C30} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-6 No Task File <==== ATTENTION
Task: {0D7C4AF1-C390-460F-A117-08D2CF5BBDA0} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {0DDDC19B-5669-4345-BBB2-94BF0BF03EB0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {14675999-A996-4681-9C51-4F6C2B6B55E8} - \SmartWeb Upgrade Trigger Task No Task File <==== ATTENTION
Task: {1AD939EC-3ABD-4A64-A4E4-76AED219A4F5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-03-18] (Acer)
Task: {1B56C742-8949-4DD8-A407-E4BAA1A3DB81} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {29171411-F09B-4E29-A95B-1BD93EF10616} - \avaavaevy No Task File <==== ATTENTION
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2BFD0FBD-3907-4D31-9EE9-F2F796AF713C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5 No Task File <==== ATTENTION
Task: {2EA08632-5CF6-484A-9B41-10A78F68FF1D} - \Binkiland No Task File <==== ATTENTION
Task: {347D777B-E91C-4BF8-A5E9-61C13793AC65} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {34FE133A-5A57-4DFE-927A-88472675C055} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {3DE242F8-7E26-4028-9E98-3C6339709A5C} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {4D1DDA2D-E9D2-4668-8D13-07114C09A1C6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation)
Task: {4D29CA2A-69FA-4F31-A8CD-1516EDA58E5A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {4E4228C6-C64C-40F1-A4E0-0548E50A5131} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {528FF6AA-DE92-4870-9250-5989C43232C0} - System32\Tasks\CBHT => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: {52CE000E-71E1-4FB8-A636-DEC64777CE93} - System32\Tasks\AFCZ => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: {56F51142-60BE-4E01-AA94-BE45248D8419} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {57E4E858-79D7-47FE-8066-D0E69673FB10} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5D30BC39-6910-4F58-BCA4-F333A3448115} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6BB9DF2F-CE65-48AE-9DF9-16A35940F90C} - \4057785f-d913-4d78-a0ef-1719bcd27f50-10_user No Task File <==== ATTENTION
Task: {6E835D58-0C38-4B7F-97D5-4F7A0B142A31} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {740DC9CC-32EA-4493-AC64-4C51B342F2AF} - System32\Tasks\InfoCollect => C:\Program Files (x86)\Acer\Acer Portal\InfoCollect.exe [2015-03-18] ()
Task: {78AECA93-23AC-4B2F-9D85-3E281EFA042B} - System32\Tasks\Run_Browser => C:\Users\Annette\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {84608847-293C-44AF-991E-9ECBE2BE2205} - System32\Tasks\{7743BE6D-D510-4749-8466-0C5C6DBE7E3A} => pcalua.exe -a "C:\Program Files (x86)\WebProtectorPlus\uninstall.exe"
Task: {8DE5664E-E6F2-4484-8443-84F8EE536BD1} - System32\Tasks\{02AC1805-8EF6-4884-B3C4-47E4C3074552} => pcalua.exe -a C:\Users\Annette\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cvs
Task: {9718617B-DD26-4131-BEB8-5899183C466B} - \ASP No Task File <==== ATTENTION
Task: {994AAE5D-1884-4D45-B603-6A1217DF20E8} - System32\Tasks\OB => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION
Task: {9B8F833F-5713-4EAE-B97A-BFFB425D9B11} - System32\Tasks\PostPoneInstall => C:\Users\Annette\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATTENTION
Task: {9DA821BD-65B4-424F-A0A1-D9FF89D5B34A} - \4057785f-d913-4d78-a0ef-1719bcd27f50-5_user No Task File <==== ATTENTION
Task: {A56AE45C-ED3D-44EA-A0A3-653CD63DA8F1} - \4057785f-d913-4d78-a0ef-1719bcd27f50-4 No Task File <==== ATTENTION
Task: {A8CA1E86-1778-47E4-BDE5-AD659A7B3951} - System32\Tasks\Opera scheduled Autoupdate 1425422720 => C:\Program Files (x86)\Opera\launcher.exe [2015-03-16] (Opera Software)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {B4665946-96C9-493A-8F7E-852AC1B736D8} - \Inst_Rep No Task File <==== ATTENTION
Task: {D4D7B509-922C-42B0-A83C-818FEA2E27DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-06-09] ()
Task: {D5269968-4077-4BC4-8AF1-1CDE08027F4F} - \4057785f-d913-4d78-a0ef-1719bcd27f50-1-7 No Task File <==== ATTENTION
Task: {E1DFB2D7-324E-4D9E-A254-A22E3E601215} - System32\Tasks\EWSRRH => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: {EE84F3A4-7841-4A1D-A277-29BE874D2497} - \Run_Bobby_Browser No Task File <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FACDB9FC-D7D8-4DD5-831D-AA89C2E46429} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {FBEAA08E-3881-48E0-A39A-AFC54A658ADC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {FD5E256F-E1E8-4FF1-A30B-16CC6877B545} - \4057785f-d913-4d78-a0ef-1719bcd27f50-11 No Task File <==== ATTENTION
Task: {FD663822-0ABB-45A8-950D-C9C1C159847C} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AFCZ.job => C:\Users\Annette\AppData\Roaming\AFCZ.exe <==== ATTENTION
Task: C:\Windows\Tasks\CBHT.job => C:\Users\Annette\AppData\Roaming\CBHT.exe <==== ATTENTION
Task: C:\Windows\Tasks\EWSRRH.job => C:\Users\Annette\AppData\Roaming\EWSRRH.exe <==== ATTENTION
Task: C:\Windows\Tasks\OB.job => C:\Users\Annette\AppData\Roaming\OB.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2015-01-08 16:08 - 2015-01-08 16:08 - 00022376 _____ () C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
2014-09-24 03:49 - 2014-05-06 14:41 - 00094208 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2015-04-07 13:47 - 2015-04-07 13:47 - 00185856 _____ () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\jnsj3748.tmp
2015-04-10 21:57 - 2015-04-10 21:57 - 00278600 ____N () C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
2015-02-08 12:06 - 2015-02-08 12:06 - 00087552 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\libglog.dll
2015-02-08 12:20 - 2015-02-08 12:20 - 01793248 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\cpprest120_1_4.dll
2015-02-08 12:20 - 2015-02-08 12:20 - 00355040 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\JsonCpp.dll
2015-02-08 01:14 - 2015-02-08 01:14 - 00425984 ____N () C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe
2015-04-18 11:36 - 2015-04-18 11:36 - 00094720 _____ () C:\Users\Annette\AppData\Local\935477DA-1429356944-8B48-BF00-00E0B8543058\cnss5982.tmp
2015-03-03 23:45 - 2015-03-03 23:45 - 00102912 _____ () C:\Users\Annette\AppData\Roaming\935477DA-1425422691-8B48-BF00-00E0B8543058\jnsmB6A3.tmp
2015-03-26 20:45 - 2015-03-26 20:45 - 00278592 ____N () C:\Program Files (x86)\QuickRef_1.10.0.12\Service\qrsvc.exe
2014-07-25 23:23 - 2012-04-24 12:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2015-04-18 11:36 - 2015-04-18 11:36 - 00098304 _____ () C:\Users\Annette\AppData\Local\935477DA-1429356971-8B48-BF00-00E0B8543058\snsl9531.tmp
2015-04-18 11:32 - 2015-04-18 11:32 - 00226304 _____ () C:\Users\Annette\AppData\Roaming\935477DA-1429349516-8B48-BF00-00E0B8543058\jnsr6AB2.tmp
2015-04-18 12:00 - 2015-04-16 18:07 - 03308488 ____N () C:\Users\Annette\AppData\Local\gmsd_de_436\upgmsd_de_436.exe
2015-04-18 12:00 - 2015-04-16 18:07 - 03982792 ____N () C:\Program Files (x86)\gmsd_de_436\gmsd_de_436.exe
2015-04-16 16:04 - 2015-04-16 16:04 - 00090880 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
2014-04-07 13:43 - 2014-04-07 13:43 - 06305752 ____N () C:\ProgramData\{afe3488a-f211-89ed-afe3-3488af21222b}\hqghumeaylnlf.exe
2015-04-16 16:04 - 2015-04-16 16:04 - 00089344 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2015-04-02 05:39 - 2015-04-02 05:39 - 00673888 ____N () C:\Program Files (x86)\XTab\HPNotify.exe
2014-09-24 03:55 - 2013-10-01 11:09 - 00078880 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
2014-08-29 20:00 - 2014-08-29 20:00 - 00100608 _____ () C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe
2015-03-04 00:39 - 2015-03-04 00:39 - 02018856 _____ () c:\Program Files (x86)\Optimizer Pro 3.52\OptProMon.dll
2015-04-07 13:24 - 2015-04-07 13:24 - 00015616 _____ () C:\Windows\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2015-03-18 14:40 - 2015-03-18 14:40 - 00013568 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2015-03-09 11:59 - 2015-03-09 11:59 - 00203008 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2015-03-09 12:00 - 2015-03-09 12:00 - 00654552 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2015-03-09 12:00 - 2015-03-09 12:00 - 00630528 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2015-03-09 12:00 - 2015-03-09 12:00 - 00119552 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2015-03-18 14:38 - 2015-03-18 14:38 - 00277096 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2015-04-18 18:28 - 2015-04-18 18:28 - 00043008 _____ () c:\users\annette\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5t7tdn.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00750080 _____ () C:\Users\Annette\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00047616 _____ () C:\Users\Annette\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00865280 _____ () C:\Users\Annette\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00200704 _____ () C:\Users\Annette\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2015-04-16 16:05 - 2015-04-16 16:05 - 00279296 _____ () C:\Program Files (x86)\Acer\abDocs\libcurl.dll
2014-09-24 03:45 - 2013-12-10 01:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-15 04:27 - 2015-01-15 04:27 - 01720320 ____N () C:\Program Files (x86)\XTab\BrowserAction.dll
2015-04-02 05:39 - 2015-04-02 05:39 - 00020576 ____N () C:\Program Files (x86)\XTab\IeWatchDog.dll
2015-04-02 05:39 - 2015-04-02 05:39 - 00023648 ____N () C:\Program Files (x86)\XTab\BrowerWatchFF.dll
2015-04-18 22:29 - 2015-04-18 22:30 - 00252928 _____ () C:\Users\Annette\AppData\Roaming\935477DA-1428407203-8B48-BF00-00E0B8543058\nswD487.tmp

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows\system32\Drivers\cwovjymd.sys:changelist
AlternateDataStreams: C:\Users\Annette\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CCL => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3373016122-1355606172-358954014-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Annette\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-3373016122-1355606172-358954014-500 - Administrator - Disabled)
Annette (S-1-5-21-3373016122-1355606172-358954014-1001 - Administrator - Enabled) => C:\Users\Annette
Gast (S-1-5-21-3373016122-1355606172-358954014-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3373016122-1355606172-358954014-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/18/2015 10:26:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IntelTechnologyAccessService.exe, Version: 1.3.3.1036, Zeitstempel: 0x54d7a6cb
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17278, Zeitstempel: 0x53eebf2e
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000000606c
ID des fehlerhaften Prozesses: 0x770
Startzeit der fehlerhaften Anwendung: 0xIntelTechnologyAccessService.exe0
Pfad der fehlerhaften Anwendung: IntelTechnologyAccessService.exe1
Pfad des fehlerhaften Moduls: IntelTechnologyAccessService.exe2
Berichtskennung: IntelTechnologyAccessService.exe3
Vollständiger Name des fehlerhaften Pakets: IntelTechnologyAccessService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IntelTechnologyAccessService.exe5

Error: (04/18/2015 09:56:25 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 09:48:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm e632de21-e97b-49bb-8b50-a0787fad654e-10.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 178

Startzeit: 01d07a109aecf4d0

Endzeit: 240

Anwendungspfad: C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exe

Berichts-ID: df88a3e7-e603-11e4-8278-c45444df1111

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/18/2015 09:16:26 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 09:14:03 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 08:40:18 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 08:01:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nslC35E.tmp, Version: 0.0.0.0, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x01d552a6
ID des fehlerhaften Prozesses: 0x1978
Startzeit der fehlerhaften Anwendung: 0xnslC35E.tmp0
Pfad der fehlerhaften Anwendung: nslC35E.tmp1
Pfad des fehlerhaften Moduls: nslC35E.tmp2
Berichtskennung: nslC35E.tmp3
Vollständiger Name des fehlerhaften Pakets: nslC35E.tmp4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: nslC35E.tmp5

Error: (04/18/2015 08:01:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nslC35E.tmp, Version: 0.0.0.0, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x01d552a6
ID des fehlerhaften Prozesses: 0x1978
Startzeit der fehlerhaften Anwendung: 0xnslC35E.tmp0
Pfad der fehlerhaften Anwendung: nslC35E.tmp1
Pfad des fehlerhaften Moduls: nslC35E.tmp2
Berichtskennung: nslC35E.tmp3
Vollständiger Name des fehlerhaften Pakets: nslC35E.tmp4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: nslC35E.tmp5

Error: (04/18/2015 07:58:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2
Name des fehlerhaften Moduls: USER32.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000142
Fehleroffset: 0x00000000000ec180
ID des fehlerhaften Prozesses: 0x1210
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3
Vollständiger Name des fehlerhaften Pakets: explorer.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5

Error: (04/18/2015 06:56:52 PM) (Source: Python Service) (EventID: 255) (User: )
Description: Exception : HTTPConnectionPool(host='127.0.0.1', port=35600): Max retries exceeded with url: /run_scheduled_task (Caused by <class 'socket.error'>: [Errno 10061] Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte)


System errors:
=============
Error: (04/18/2015 10:38:23 PM) (Source: DCOM) (EventID: 10005) (User: MAUSI1702PC)
Description: 3CCL-Service{3C3C652C-CF61-4999-88A2-6B65951E55E9}

Error: (04/18/2015 10:38:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CCL" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/18/2015 10:38:21 PM) (Source: DCOM) (EventID: 10005) (User: MAUSI1702PC)
Description: 3CCL-Service{3C3C652C-CF61-4999-88A2-6B65951E55E9}

Error: (04/18/2015 10:38:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CCL" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/18/2015 10:38:21 PM) (Source: DCOM) (EventID: 10005) (User: MAUSI1702PC)
Description: 3CCL-Service{3C3C652C-CF61-4999-88A2-6B65951E55E9}

Error: (04/18/2015 10:38:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CCL" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/18/2015 10:38:18 PM) (Source: DCOM) (EventID: 10005) (User: MAUSI1702PC)
Description: 3CCL-Service{3C3C652C-CF61-4999-88A2-6B65951E55E9}

Error: (04/18/2015 10:38:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CCL" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/18/2015 10:38:12 PM) (Source: DCOM) (EventID: 10005) (User: MAUSI1702PC)
Description: 3CCL-Service{3C3C652C-CF61-4999-88A2-6B65951E55E9}

Error: (04/18/2015 10:38:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CCL" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3


Microsoft Office Sessions:
=========================
Error: (04/18/2015 10:26:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IntelTechnologyAccessService.exe1.3.3.103654d7a6cbKERNELBASE.dll6.3.9600.1727853eebf2e40000015000000000000606c77001d079f47bfac375C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exeC:\Windows\system32\KERNELBASE.dll3b2068be-e609-11e4-8278-c45444df1111

Error: (04/18/2015 09:56:25 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 09:48:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: e632de21-e97b-49bb-8b50-a0787fad654e-10.exe1.0.0.117801d07a109aecf4d0240C:\Program Files (x86)\I - Cinema\e632de21-e97b-49bb-8b50-a0787fad654e-10.exedf88a3e7-e603-11e4-8278-c45444df1111

Error: (04/18/2015 09:16:26 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 09:14:03 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 08:40:18 PM) (Source: COM) (EventID: 18221) (User: MAUSI1702PC)
Description: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeS-1-5-21-3373016122-1355606172-358954014-1001

Error: (04/18/2015 08:01:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: nslC35E.tmp0.0.0.02a425e19unknown0.0.0.000000000c000041d01d552a6197801d07a01884cfea5C:\Users\Annette\AppData\Local\Temp\nslC35E.tmpunknownee96aed3-e5f4-11e4-8278-c45444df1111

Error: (04/18/2015 08:01:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: nslC35E.tmp0.0.0.02a425e19unknown0.0.0.000000000c000000501d552a6197801d07a01884cfea5C:\Users\Annette\AppData\Local\Temp\nslC35E.tmpunknowne408d026-e5f4-11e4-8278-c45444df1111

Error: (04/18/2015 07:58:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: explorer.exe6.3.9600.1766754c6f7c2USER32.dll6.3.9600.17736550f4336c000014200000000000ec180121001d07a014e076f5cC:\Windows\explorer.exeUSER32.dll8c03283d-e5f4-11e4-8278-c45444df1111

Error: (04/18/2015 06:56:52 PM) (Source: Python Service) (EventID: 255) (User: )
Description: Exception : HTTPConnectionPool(host='127.0.0.1', port=35600): Max retries exceeded with url: /run_scheduled_task (Caused by <class 'socket.error'>: [Errno 10061] Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte)


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) 3556U @ 1.70GHz
Percentage of memory in use: 59%
Total physical RAM: 4019.27 MB
Available physical RAM: 1617.2 MB
Total Pagefile: 8115.27 MB
Available Pagefile: 4888.17 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:915.84 GB) (Free:865.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: C16281DA)

Partition: GPT Partition Type.

==================== End Of Log ============================
besser habe ich es nicht hinbekommen :-( hoffe du kannst etwas damit anfangen .g netty

Ich hoffe das hilft dir weiter besser ging es nicht lg netty

Alt 22.04.2015, 08:01   #10
schrauber
/// the machine
/// TB-Ausbilder
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    CommentBlocker
    DiscoUnntLoCaetor
    FleuxibleShopper
    Optimizer Pro v3.2
    Search Protect
    shopnnDROP
    WSE_Binkiland

  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.04.2015, 18:39   #11
mausi1702
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


Hi
Mein pc lässt sich gereicht mehr starten meine Tochter hat ihn heute Morgen mitgenommen und gibt ihn zu einem Freund im Computerspiel. Tut mir leid danke dennoch für deine Hilfe . LG Betty
Ich hoffe wenn ich wieder mal ein Problem habe das ich mich hier wieder melden darf. Jetzt geht es kleiner weiter mit Tabletten.

Computerservice #

Alt 23.04.2015, 13:41   #12
schrauber
/// the machine
/// TB-Ausbilder
 
unico Browser. lässt sich nicht mehr deinstalieren - Standard

unico Browser. lässt sich nicht mehr deinstalieren


ok
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu unico Browser. lässt sich nicht mehr deinstalieren
andere, angezeigt, beendet, browser, deinstaliere, deinstalieren, einstellung, gen, geschlossen, grosse, hallo zusammen, icon, laptop, mozilla, nicht mehr, nichts, programme, riesen, systems, unico browser, webseite, webseiten, windows, woche, wochen, zusammen


« wahrscheinlicher Virus in msdt.exe | Search Protect in der Taskleiste nach Skype download! »


Ähnliche Themen: unico Browser. lässt sich nicht mehr deinstalieren


  1. Windows 8 Firewall lässt sich nicht aktivieren und Browser (Firefox und Chrome) laden nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 26.05.2015 (3)
  2. Unico Browser deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 02.05.2015 (18)
  3. Avira Antivir lässt sich nicht mehr installieren/ Programme lassen sich nicht öffnen
    Antiviren-, Firewall- und andere Schutzprogramme - 23.03.2015 (10)
  4. Browser-Virus lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 06.11.2014 (11)
  5. Secunia PSi lässt sich nicht deinstalieren !
    Alles rund um Windows - 26.10.2014 (8)
  6. Firefox lässt sich nicht öffnen, stattdessen machen sich andere Browser wie Snap do auf.
    Log-Analyse und Auswertung - 08.03.2014 (8)
  7. windows 7 64-bit yahoo toolbar lässt sich nicht deinstalieren
    Alles rund um Windows - 09.01.2014 (4)
  8. Sony Vaio (ca.5 Jahre alt) fährt nach Polizeivirus nicht mehr hoch.Es lässt sich auch nicht mehr laden.
    Netzwerk und Hardware - 06.09.2013 (1)
  9. DVD Laufwerk öffnet sich von selbst und lässt sich nicht mehr schließen
    Plagegeister aller Art und deren Bekämpfung - 07.10.2012 (1)
  10. AV Software lässt sich nicht mehr installieren und Firewall nicht mehr aktivieren
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (7)
  11. AVG Antivirus scant nicht mehr lässt sich auch nicht mehr entfernen
    Plagegeister aller Art und deren Bekämpfung - 17.10.2011 (1)
  12. Personal Shield Pro - Anti-Malware beendet sich und lässt sich nicht mehr starten-auch nicht mit OTH
    Log-Analyse und Auswertung - 18.08.2011 (1)
  13. Kein Browser lässt sich mehr starten!
    Log-Analyse und Auswertung - 19.04.2010 (30)
  14. avira plötzlich nicht mehr aktiv und lässt sich nicht mehr aktivieren
    Plagegeister aller Art und deren Bekämpfung - 24.12.2009 (13)
  15. Treiber lässt sich nicht deinstalieren
    Alles rund um Windows - 26.05.2008 (6)
  16. Norton 2005 lässt sich nicht deinstalieren !
    Antiviren-, Firewall- und andere Schutzprogramme - 09.04.2006 (7)
  17. Browser lässt sich nicht mehr öffnen
    Plagegeister aller Art und deren Bekämpfung - 20.10.2004 (6)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema unico Browser. lässt sich nicht mehr deinstalieren - Hallo zusammen ich habe ein riesen grossen. Seit ein paar Wochen habe ich ein Laptop mit Windows 8 . Jetzt habe ich nachdem etliche Webseiten aufgegangen sind die ich immer - unico Browser. lässt sich nicht mehr deinstalieren...
Archiv
Du betrachtest: unico Browser. lässt sich nicht mehr deinstalieren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19