Hallo zusammen,

ich habe mir die Anleitungen durchgelesen etc, aber ich bin mir nicht 100% sicher wie ich vorgehen soll, da ich meinen PC komplett bereinigen will von jeglicher schädlichen Software etc.

Wie sollte ich diesbezüglich am besten vorgehen?

Ich habe mit Firefox Probleme da ich immer wieder auf andere seiten umgleitet werde, obwohl ich die richtige url eingegeben habe.

Desweiteren habe ich festgestellt das sich SWEET PAGE, nicht deinstallieren lässt.

Und als ich ADWcleaner gestartet habe, bekomme ich eine Fehlermeldung: (Subscript used on non-accessible variable) und das Tool schließt sich.

Daher würde ich gerne meinen gesamten PC von aller schädlicher Software beseitigen.

Wie gehe hier am besten vor?

Bedanke mich jetzt schon für Eure Hilfe.

Grüße
Daniel

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST


FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-05-2015
Ran by Greg Daniels (administrator) on GREGDANIELS-PC on 19-05-2015 20:23:11
Running from C:\Users\Greg Daniels\Downloads
Loaded Profiles: Greg Daniels (Available profiles: Greg Daniels & Tinka & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ITE Tech. Inc.) C:\Windows\System32\IRMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(© onlinetvrecorder.com) C:\Users\Greg Daniels\Downloads\OTRDecoder_2.0.0.22\OTRDecoder_2.0.0.22\2009Decoder.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-04-14] (Malwarebytes Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Run: [Google Update] => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-15] (Google Inc.)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe [927920 2015-04-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {04d5277c-0fb8-11e3-9429-bc5ff4214faa} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {04d5279e-0fb8-11e3-9429-bc5ff4214faa} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {171af712-3e7d-11e3-81d8-bc5ff4214faa} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {17724d93-2184-11e4-981e-bc5ff4214faa} - G:\Startme.exe
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {3c0d6b00-3e79-11e3-8b52-bc5ff4214faa} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {af4111a4-963a-11e1-91cd-806e6f6e6963} - D:\Setup.exe
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\MountPoints2: {c90c5306-3e84-11e3-ae4d-bc5ff4214faa} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-18\...\RunOnce: [AOD] => C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
Hosts: 127.0.0.1				activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-06-10] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2012-05-24] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @coreonline.com/run3d,version=1.0 -> C:\Users\Greg Daniels\AppData\LocalLow\Square Enix\nprun3d.dll [2012-08-23] (Square Enix)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\sweet-page.xml [2014-04-23]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-12-25]
FF HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Greg Daniels\AppData\Roaming\14001.019

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR Profile: C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-21]
CHR Extension: (Google Drive) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-23]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2012-10-10]
CHR Extension: (AdBlock) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-05-16]
CHR Extension: (Bookmark Manager) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2014-01-23]
CHR Extension: (Earth) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac [2014-05-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1220608 2009-05-06] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-05] (DT Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2012-05-19] (ITE                      )
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-19] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
U0 yvkfxn; C:\Windows\System32\drivers\laiva.sys [79064 2015-05-19] (Malwarebytes Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-19 20:23 - 2015-05-19 20:23 - 00020376 _____ () C:\Users\Greg Daniels\Downloads\FRST.txt
2015-05-19 20:22 - 2015-05-19 20:23 - 00000000 ____D () C:\FRST
2015-05-19 20:20 - 2015-05-19 20:20 - 02107904 _____ (Farbar) C:\Users\Greg Daniels\Downloads\FRST64.exe
2015-05-19 20:02 - 2015-05-19 20:02 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\laiva.sys
2015-05-19 19:43 - 2013-06-10 06:14 - 01092512 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-05-19 19:43 - 2013-06-10 06:14 - 00971680 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-05-19 19:38 - 2015-05-19 19:38 - 02209792 _____ () C:\Users\Greg Daniels\Downloads\adwcleaner_4.204 (3).exe
2015-05-19 19:30 - 2015-05-19 19:31 - 02209792 _____ () C:\Users\Greg Daniels\Downloads\adwcleaner_4.204 (2).exe
2015-05-19 19:29 - 2015-05-19 19:31 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Greg Daniels\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-19 19:26 - 2015-05-19 19:26 - 02209792 _____ () C:\Users\Greg Daniels\Downloads\adwcleaner_4.204 (1).exe
2015-05-19 19:26 - 2015-05-19 19:26 - 01203488 _____ () C:\Users\Greg Daniels\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2015-05-19 19:24 - 2015-05-19 19:25 - 02209792 _____ () C:\Users\Greg Daniels\Downloads\adwcleaner_4.204.exe
2015-05-19 19:12 - 2015-05-19 19:12 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2
2015-05-19 19:10 - 2015-05-19 19:11 - 17805707 _____ () C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2.zip
2015-05-19 19:09 - 2015-05-19 19:09 - 01203488 _____ () C:\Users\Greg Daniels\Downloads\StreamTransport - CHIP-Installer.exe
2015-05-19 19:01 - 2015-05-19 19:01 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\fast_video_download-5.0.1.48-fx
2015-05-19 19:00 - 2015-05-19 19:00 - 00080430 _____ () C:\Users\Greg Daniels\Downloads\fast_video_download-5.0.1.48-fx.zip
2015-05-19 18:55 - 2015-05-19 19:52 - 1618873364 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.16_21-30_sport1_150_TVOON_DE.mpg.HQ.avi.otrkey
2015-05-19 18:53 - 2015-05-19 18:54 - 2099419632 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.17_14-00_sport1_145_TVOON_DE.mpg.HQ.avi
2015-05-18 20:18 - 2015-05-18 20:25 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\FreeDownloadManager.ORG
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\ProgramData\FreeDownloadManager.ORG
2015-05-18 20:14 - 2015-05-18 20:15 - 10725888 _____ (FreeDownloadManager.ORG ) C:\Users\Greg Daniels\Downloads\fdminst.exe
2015-05-18 19:23 - 2015-05-18 20:27 - 2099420154 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.17_14-00_sport1_145_TVOON_DE.mpg.HQ.avi.otrkey
2015-05-18 19:05 - 2015-05-18 19:07 - 1637278132 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 4____07-30_avi.avi
2015-05-18 18:17 - 2015-05-18 18:18 - 1551307328 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 3____21-30_avi.avi
2015-05-17 23:27 - 2015-05-17 23:29 - 1567080718 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 2_HQ.avi
2015-05-17 22:31 - 2015-05-17 22:33 - 2274659012 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Start_avi.avi
2015-05-17 20:51 - 2015-05-17 20:51 - 00002190 _____ () C:\Users\Greg Daniels\Desktop\JDownloader 2.lnk
2015-05-17 20:51 - 2015-05-17 20:51 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-05-17 20:42 - 2015-05-18 20:22 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 2.0
2015-05-10 23:30 - 2015-05-10 23:30 - 533762583 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Das_Rennen_15.05.10_14-00_rtl_105_TVOON_DE.mpg.mp4
2015-05-10 18:13 - 2015-05-10 18:15 - 14113000 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN8STW09WW5.exe
2015-05-10 18:13 - 2015-05-10 18:14 - 07374952 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN4CAR37WW5.exe
2015-05-10 18:13 - 2015-05-10 18:14 - 05878056 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN3ETN48WW5.exe
2015-05-10 18:12 - 2015-05-10 18:15 - 37689488 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN2AUD32WW5.exe
2015-05-10 18:11 - 2015-05-10 18:16 - 58339808 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN3BTH51WW5.exe
2015-05-10 18:11 - 2015-05-10 18:12 - 22273552 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN1SRM09WW6.exe
2015-05-10 18:11 - 2015-05-10 18:12 - 05281184 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN12STW78WW5.exe
2015-05-10 18:08 - 2015-05-10 18:15 - 169293968 _____ (Lenovo Group ) C:\Users\Greg Daniels\Downloads\IN1VDO65WW6.exe
2015-05-02 14:22 - 2015-05-02 14:26 - 30630588 _____ () C:\Users\Greg Daniels\Downloads\Adelaide1988_AC_V1_2.7z
2015-04-26 17:37 - 2015-04-26 21:02 - 00000000 ____D () C:\Users\Tinka\AppData\Local\Microsoft Games
2015-04-25 19:23 - 2015-04-25 19:23 - 00000000 ____D () C:\Users\Greg Daniels\Documents\The Crew
2015-04-24 19:33 - 2015-04-24 19:33 - 00238592 _____ () C:\Users\Greg Daniels\Downloads\Vypyr Settings Table - Factory and custom.xls
2015-04-20 23:11 - 2015-04-20 23:11 - 1271416790 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Das_Rennen_15.04.19_17-00_rtl_105_TVOON_DE.mpg.avi
2015-04-20 18:07 - 2015-04-25 18:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-04-20 17:56 - 2015-04-20 18:29 - 1271417312 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Das_Rennen_15.04.19_17-00_rtl_105_TVOON_DE.mpg.avi.otrkey
2015-04-19 00:38 - 2015-04-19 00:38 - 403497375 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Qualifying_15.04.18_16-45_rtl_90_TVOON_DE.mpg.mp4

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-19 20:10 - 2012-09-15 22:05 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job
2015-05-19 20:03 - 2012-06-22 20:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-19 20:02 - 2014-12-24 15:37 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\IHlpr
2015-05-19 20:02 - 2014-02-03 00:48 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2015-05-19 20:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization
2015-05-19 19:59 - 2013-10-16 22:02 - 00000000 ____D () C:\AdwCleaner
2015-05-19 19:50 - 2012-05-05 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Mozilla
2015-05-19 19:48 - 2013-01-30 22:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-19 19:43 - 2014-03-01 00:13 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-19 19:43 - 2013-06-10 06:14 - 00000000 ____D () C:\Program Files\Java
2015-05-19 19:42 - 2013-06-10 06:14 - 00319584 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-05-19 19:41 - 2014-03-01 00:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-19 19:40 - 2014-12-01 22:43 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-19 19:40 - 2013-05-31 17:33 - 00000000 ____D () C:\Program Files (x86)\Java
2015-05-19 19:32 - 2014-04-25 20:25 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-19 19:30 - 2014-05-18 18:53 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-19 19:30 - 2014-05-18 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-19 19:30 - 2014-05-18 18:53 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-19 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2015-05-19 18:42 - 2012-05-05 00:47 - 01601634 _____ () C:\Windows\WindowsUpdate.log
2015-05-19 18:41 - 2014-05-11 01:21 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\vlc
2015-05-19 18:05 - 2012-06-22 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-19 18:05 - 2012-05-19 15:30 - 00000048 _____ () C:\monitor.log
2015-05-19 14:34 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-19 14:34 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-19 14:26 - 2014-04-02 04:04 - 00124443 _____ () C:\Windows\setupact.log
2015-05-19 14:26 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-18 21:52 - 2014-01-08 08:02 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{45EFE841-25F4-426C-93DC-FCEDCACE6945}
2015-05-18 20:26 - 2012-12-15 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\DVDVideoSoft
2015-05-18 12:52 - 2009-07-14 19:58 - 00697912 _____ () C:\Windows\system32\perfh007.dat
2015-05-18 12:52 - 2009-07-14 19:58 - 00148608 _____ () C:\Windows\system32\perfc007.dat
2015-05-18 12:52 - 2009-07-14 07:13 - 01616098 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 12:33 - 2014-04-10 20:31 - 00071412 _____ () C:\Windows\PFRO.log
2015-05-18 04:58 - 2012-06-22 20:10 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-18 04:58 - 2012-06-22 20:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-18 00:10 - 2012-09-15 22:05 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job
2015-05-18 00:05 - 2012-09-15 22:05 - 00004132 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA
2015-05-18 00:05 - 2012-09-15 22:05 - 00003736 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core
2015-05-17 20:51 - 2014-05-10 16:16 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 0.9
2015-05-12 23:20 - 2015-04-11 16:39 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\tinka
2015-05-12 20:40 - 2013-03-11 03:49 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-11 23:18 - 2012-07-08 00:31 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\TS3Client
2015-05-10 15:55 - 2012-09-19 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTCC 2006
2015-05-08 19:58 - 2014-12-04 23:22 - 00000098 _____ () C:\Users\Tinka\Desktop\Neues Textdokument.txt
2015-05-05 23:03 - 2015-03-09 20:40 - 00002546 _____ () C:\Users\Greg Daniels\Desktop\Neues Textdokument (2).txt
2015-04-25 19:24 - 2014-12-25 21:51 - 00000000 ____D () C:\Users\Greg Daniels\Documents\ProfileCache

==================== Files in the root of some directories =======

2012-08-01 07:35 - 2012-08-31 15:09 - 0000048 _____ () C:\Users\Greg Daniels\AppData\Roaming\AcroIEHelpe.txt
2014-04-27 19:21 - 2014-05-20 20:45 - 0000011 _____ () C:\Users\Greg Daniels\AppData\Roaming\ApplicationVersion.txt
2012-08-06 20:09 - 2012-08-06 20:09 - 0006400 _____ () C:\Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe181.dll
2012-08-07 21:26 - 2012-08-07 21:26 - 0006400 _____ () C:\Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe183.dll
2012-08-23 22:20 - 2012-09-11 03:04 - 0000034 _____ () C:\Users\Greg Daniels\AppData\Roaming\blckdom.res
2014-02-03 02:13 - 2014-03-16 05:16 - 0000114 _____ () C:\Users\Greg Daniels\AppData\Roaming\Camdata.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamLayout.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamShapes.ini
2014-02-03 00:53 - 2014-03-16 05:16 - 0004548 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamStudio.cfg
2012-08-01 07:35 - 2012-08-01 07:35 - 0000264 _____ () C:\Users\Greg Daniels\AppData\Roaming\srvblck5.tmp
2014-04-27 19:34 - 2014-05-12 20:37 - 0025088 _____ () C:\Users\Greg Daniels\AppData\Roaming\TGCMembers.xls
2012-08-27 01:18 - 2012-08-27 01:18 - 0000000 _____ () C:\Users\Greg Daniels\AppData\Roaming\uq3rxlpi.default.tmp
2012-08-01 18:28 - 2012-09-20 03:56 - 0000037 _____ () C:\Users\Greg Daniels\AppData\Roaming\urhtps.dat
2014-02-03 00:48 - 2014-03-16 04:02 - 0000096 _____ () C:\Users\Greg Daniels\AppData\Roaming\version2.xml
2014-03-12 22:32 - 2014-03-12 22:32 - 0000600 _____ () C:\Users\Greg Daniels\AppData\Roaming\winscp.rnd
2012-08-05 00:23 - 2014-02-06 20:02 - 0003584 _____ () C:\Users\Greg Daniels\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-24 15:37 - 2014-12-24 15:37 - 0000026 _____ () C:\Users\Greg Daniels\AppData\Local\isoworkshop.ini
2013-01-01 23:04 - 2013-01-03 17:09 - 0001501 _____ () C:\Users\Greg Daniels\AppData\Local\RecConfig.xml
2013-04-07 23:53 - 2013-04-07 23:53 - 0049482 _____ () C:\Users\Greg Daniels\AppData\Local\recently-used.xbel
2012-05-05 22:41 - 2014-04-26 17:44 - 0007603 _____ () C:\Users\Greg Daniels\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Greg Daniels\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Greg Daniels\AppData\Local\Temp\Cleanup.dll
C:\Users\Greg Daniels\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplkjoyc.dll
C:\Users\Greg Daniels\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Greg Daniels\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Greg Daniels\AppData\Local\Temp\i4jdel0.exe
C:\Users\Greg Daniels\AppData\Local\Temp\ICReinstall_JDSetup130442040613825377.exe
C:\Users\Greg Daniels\AppData\Local\Temp\ICReinstall_JDSetup130442044320837406.exe
C:\Users\Greg Daniels\AppData\Local\Temp\ICReinstall_JDSetup130442045514575684.exe
C:\Users\Greg Daniels\AppData\Local\Temp\ICReinstall_JDSetup130442049037117915.exe
C:\Users\Greg Daniels\AppData\Local\Temp\ICReinstall_wm2014xxl_CB-DL-Manager.exe
C:\Users\Greg Daniels\AppData\Local\Temp\JDSetup130427520911455623.exe
C:\Users\Greg Daniels\AppData\Local\Temp\JDSetup130442040613825377.exe
C:\Users\Greg Daniels\AppData\Local\Temp\JDSetup130442044320837406.exe
C:\Users\Greg Daniels\AppData\Local\Temp\JDSetup130442045514575684.exe
C:\Users\Greg Daniels\AppData\Local\Temp\JDSetup130442049037117915.exe
C:\Users\Greg Daniels\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Greg Daniels\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Greg Daniels\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Greg Daniels\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Greg Daniels\AppData\Local\Temp\MP3_Launcher_1_36_0_0.exe
C:\Users\Greg Daniels\AppData\Local\Temp\msvcm80.dll
C:\Users\Greg Daniels\AppData\Local\Temp\msvcp80.dll
C:\Users\Greg Daniels\AppData\Local\Temp\msvcr80.dll
C:\Users\Greg Daniels\AppData\Local\Temp\proxy_vole7764047715685140344.dll
C:\Users\Greg Daniels\AppData\Local\Temp\Quarantine.exe
C:\Users\Greg Daniels\AppData\Local\Temp\raptrpatch.exe
C:\Users\Greg Daniels\AppData\Local\Temp\raptr_stub.exe
C:\Users\Greg Daniels\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Greg Daniels\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Greg Daniels\AppData\Local\Temp\sqlite3.dll
C:\Users\Greg Daniels\AppData\Local\Temp\tmp38AD.exe
C:\Users\Greg Daniels\AppData\Local\Temp\tmpA229.exe
C:\Users\Greg Daniels\AppData\Local\Temp\utt218F.tmp.exe
C:\Users\Greg Daniels\AppData\Local\Temp\_unps.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-17 23:52

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---


Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-05-2015
Ran by Greg Daniels at 2015-05-19 20:23:53
Running from C:\Users\Greg Daniels\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1978074120-1168334530-1069948001-500 - Administrator - Disabled) => C:\Users\Administrator
Gast (S-1-5-21-1978074120-1168334530-1069948001-501 - Limited - Disabled)
Greg Daniels (S-1-5-21-1978074120-1168334530-1069948001-1000 - Administrator - Enabled) => C:\Users\Greg Daniels
HomeGroupUser$ (S-1-5-21-1978074120-1168334530-1069948001-1008 - Limited - Enabled)
Tinka (S-1-5-21-1978074120-1168334530-1069948001-1013 - Limited - Enabled) => C:\Users\Tinka

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Alcatech BPM Studio Professional v4.9.1 (HKLM-x32\...\Alcatech BPM Studio Professional v4.9.1) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{74292F90-895A-4FC6-A692-9641532B1B63}) (Version: 3.5.28.322 - ArcSoft)
ASRock eXtreme Tuner v0.1.122 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
Assetto Corsa (HKLM-x32\...\Steam App 244210) (Version:  - Kunos Simulazioni)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.6.1 - BitTorrent Inc.)
Bulk Rename Utility 2.7.1.3 (HKLM\...\Bulk Rename Utility_is1) (Version:  - TGRMN Software)
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CCleaner (HKLM\...\CCleaner) (Version: 3.19 - Piriform)
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
DVR Configuration Tool (HKLM-x32\...\{FCEE0D0C-FF8D-4552-A6C5-67ECE0F82EF9}) (Version: 1.0.9 - Pearl Agency GmbH)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{AF37F9DE-0726-439E-BC10-43D9195394D0}) (Version: 2.1.26.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
GetFoldersize 2.5.15 (HKLM-x32\...\GetFoldersize_is1) (Version: 2.5.15 - Michael Thummerer Software Design)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)
Hitman Absolution (HKLM-x32\...\Hitman Absolution_is1) (Version:  - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\7289-1030-5602-7421) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
MAGIX Music Maker 16 Premium Download-Version (HKLM-x32\...\MAGIX Music Maker 16 Premium Download-Version D) (Version: 16.0.0.30 - MAGIX AG)
MAGIX Screenshare (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (HKLM-x32\...\MAGIX Speed burnR D) (Version: 7.0.1.27 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.56 - Peter Lorenz)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Thunderbird 31.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.6.0 (x86 de)) (Version: 31.6.0 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MULTIWEB FinMail Client (HKLM-x32\...\MULTIWEB FinMail Client) (Version:  - )
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - )
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
RaceRoom Racing Experience  (HKLM-x32\...\Steam App 211500) (Version:  - Sector3 Studios)
RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - SimBin)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6378 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Shutdown Timer (HKLM\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems)
Square Enix Secure Launcher (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Square Enix Secure Launcher) (Version: 1.0.0.106 - Square Enix)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 6.3.13.0 - 2BrightSparks)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Vegas Pro 10.0 (HKLM-x32\...\{3C8CDDCF-D09A-11DF-8BB6-0013D3D69929}) (Version: 10.0.387 - Sony)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WRC 4 FIA World Rally Championship (HKLM-x32\...\V1JDNEZJQVdvcmxkUmFsbHlDaGFtcGlvbnNoaXA=_is1) (Version: 1 - )
XSplit (HKLM-x32\...\{24570B2F-3937-47F0-A16A-E82B480A7699}) (Version: 1.1.1210.3101 - SplitMediaLabs)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)

==================== Restore Points  =========================

17-05-2015 23:59:45 Geplanter Prüfpunkt
18-05-2015 02:11:00 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-03-01 15:47 - 00000857 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1				activate.adobe.com

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0B345E2F-AB83-4CF9-A1D4-EF2DA9C3796B} - System32\Tasks\{048949AF-0030-4A6C-A490-FBE7983874EC} => pcalua.exe -a "C:\Users\Greg Daniels\Downloads\pCARS_0226_0_build_10_pre-alpha_PC-EXT_SFX.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {0C553865-EF19-448C-89E4-1D0C426FD006} - \Plus-HD-2.6-chromeinstaller No Task File <==== ATTENTION
Task: {243D843E-4F31-4EBB-955B-CAB94EF1447C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {43A294C9-FA6F-43DA-A82B-F785F314EB34} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {4AE49558-6F02-4C08-8447-A0BE42C294C1} - \Plus-HD-2.6-enabler No Task File <==== ATTENTION
Task: {591E7FA1-B37A-4ED6-8F76-0993B9A9002B} - System32\Tasks\{A0DF0DE5-F2E8-42DF-86AA-244D0D7E9271} => pcalua.exe -a "C:\Users\Greg Daniels\AppData\Roaming\sweet-page\UninstallManager.exe" -c -ptid=cor
Task: {8DEFF3AD-D770-410C-B3EC-6B6A70816E7B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {964114A5-29DB-48E7-9B04-1D8074AF84B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {A2557E3D-3E64-4503-9E5F-C393507110A0} - \Plus-HD-2.6-updater No Task File <==== ATTENTION
Task: {C2AE3E8F-2BBC-4CC4-ACB0-8698E7FD1F79} - System32\Tasks\irMonitor => C:\Windows\system32\IRMonitor.exe [2012-05-19] (ITE Tech. Inc.)
Task: {D30EEDDB-8486-4F6C-8F53-4E46A8CA25D9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {DF0733C9-DDFB-448A-868E-B93DAC856BB3} - System32\Tasks\{153BE79C-06FE-4C2A-BF6E-96BFF87BF7FD} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/228800
Task: {EA40EE81-5164-4F9D-9B2E-E523C9E00265} - System32\Tasks\{1206CED3-2F7C-4754-A0EA-EFA4BA8C2946} => C:\Users\Greg Daniels\Downloads\3d Sim Editor & Trkmaker with all support files tutorials & patches\3DsimED v2.6a\3DSIMED.EXE
Task: {EFECA3F3-380E-4EDC-838F-1C0A1CB01841} - \Plus-HD-2.6-codedownloader No Task File <==== ATTENTION
Task: {F46F8E40-704B-4A9A-8B9E-FA1128961001} - \Plus-HD-2.6-firefoxinstaller No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-11-20 22:23 - 2014-11-20 22:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2014-12-08 12:10 - 2014-12-08 12:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-05-05 13:49 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2014-02-11 20:21 - 2014-02-11 20:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-02-11 20:22 - 2014-02-11 20:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-02-11 20:21 - 2014-02-11 20:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-02-11 20:22 - 2014-02-11 20:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-11-20 22:23 - 2014-11-20 22:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-05-17 19:00 - 2015-05-05 05:19 - 01633608 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libglesv2.dll
2015-05-17 19:00 - 2015-05-05 05:19 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libegl.dll
2015-05-17 19:00 - 2015-05-05 05:19 - 26787144 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll
2015-02-01 13:17 - 2015-02-01 13:17 - 00039200 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 18:41 - 2014-05-24 18:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 18:41 - 2014-05-24 18:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-04-20 18:07 - 2015-04-20 18:07 - 03348592 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2015-04-20 18:07 - 2015-04-20 18:07 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-04-20 18:07 - 2015-04-20 18:07 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{5C772C56-8367-456F-A6A9-7720F647221F}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{2EF12006-7D96-4274-B5EF-13D822701CB9}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{1380BB40-BFE0-4D4D-8957-300C628B88DF}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{9BB40361-7894-433C-BEEA-9A0B60981692}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{F3C3BBB9-03E2-4435-9774-E189205DD6D5}] => (Allow) LPort=5353
FirewallRules: [{21D472EB-37D1-4E85-9870-0139E3841D04}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{26942412-7E8A-47FA-B599-D10A6CB80699}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{822692A4-0237-404A-A20C-95A225DED8CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29780BE4-41CA-4F3D-A973-0D076E7A1967}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{72AF4E2C-4393-4873-8AC7-DB5F3F0C70E6}] => (Allow) LPort=5910
FirewallRules: [{AC1C6A5C-4615-414F-A546-1AC9D0FFEEBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{3E3DB74B-964E-4B90-9C40-30C9C4AC4A65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{65913E53-5C3C-41B0-8419-1654019CA8EC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{06A213A8-C71B-4FAC-8777-E87DC9B0E137}] => (Allow) LPort=2869
FirewallRules: [{BCD76253-8F8B-41E5-8D9C-981C22B52DE2}] => (Allow) LPort=1900
FirewallRules: [{95EC8F1D-4CD9-498A-B0A7-12B0B9DEA925}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DB711672-787C-41B8-BB40-4FB31C9DC9CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{478AEE22-4B3B-4885-BF7E-7AAFA5EB66A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{42003686-2E2F-4C52-B70F-8313A2958CAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F6425086-2394-4219-99D2-98FB6EB6DEC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{89EB0698-219E-4B07-B656-DF9522CD889F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{4C3374B4-0C3D-48FE-8841-A84122C85AF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{442D3E9F-2719-4DAC-AF8C-B93CD239719E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{60BC6CCC-0981-4FD9-8DD0-FD6C3E8AA61F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{9AC23BE3-3024-40E0-A1D6-BC163BF53A9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{74B521E9-C4F6-4E90-B38E-F33F4DD02F05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{607E6B4B-904D-4CC8-B5F2-11D4CB33B6F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{70C8D89B-3F53-449F-8B2C-425F52652A96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DFA29F84-F790-4866-951F-9FCA1CFB83B3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F376BACA-D4B9-4C77-8341-07B5686C6D25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{49DFC5E4-AE9A-48D6-B9AE-099C8331E7E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{2F24D1D8-92BB-4DD5-955A-B719A9999ADB}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B688EFB3-43B0-44C7-A484-E3203DB4B129}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{63D1D0F3-3EF1-400E-898A-F358B7D2865C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{938B911B-517F-4902-88DC-A1832CA1E8B9}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4BCA378E-3091-4A34-87CC-8ED4C1E7BB65}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{823850EA-5936-4204-8B5B-7257E068A911}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{F17188AF-B872-4393-B439-5E12B666089B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{DACBD4E9-D966-47A4-9CE5-0C2218A8EE94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{01768CD2-172C-45E6-82D7-65E86F4DB30C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{BAF7B97B-F8A3-4FA1-895E-F857FC50138F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{B3053AAF-C0C7-4FD3-B547-1F37058F3C57}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3EC16C90-1C99-4B15-B5EC-FDB7EC0B7933}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{16E323CD-799F-41CE-9A29-FFFB1D784D1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0A15399D-9651-43FE-9F7C-8D9BB24427C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1AAEF83E-DCC0-4400-B9D5-BF9F2C2BA842}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{CAA23F88-3F27-4B57-9ED0-7704C661CAED}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{91FF7D87-B0D9-47FE-9F73-BB2326092344}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Lumia 830 (RM-984)
Description: Lumia 830 (RM-984)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Lumia 830 (RM-984)
Description: Lumia 830 (RM-984)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Lumia 830 (RM-984)
Description: Lumia 830 (RM-984)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: AODDriver4.01
Description: AODDriver4.01
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.01
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/19/2015 07:17:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StreamTransport.exe, Version: 1.1.6.2, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: sockhook.dll, Version: 1.0.2.436, Zeitstempel: 0x5383ffe3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006dc10
ID des fehlerhaften Prozesses: 0x196c
Startzeit der fehlerhaften Anwendung: 0xStreamTransport.exe0
Pfad der fehlerhaften Anwendung: StreamTransport.exe1
Pfad des fehlerhaften Moduls: StreamTransport.exe2
Berichtskennung: StreamTransport.exe3

Error: (05/18/2015 01:38:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm chrome.exe, Version 42.0.2311.152 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 738

Startzeit: 01d0915eed51ec38

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Berichts-ID: 58da90be-fd52-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 01:36:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm chrome.exe, Version 42.0.2311.152 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: d3c

Startzeit: 01d0915ea02be543

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Berichts-ID: 1936f958-fd52-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 01:32:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm chrome.exe, Version 42.0.2311.152 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: f04

Startzeit: 01d0915658d76005

Endzeit: 10

Anwendungspfad: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Berichts-ID: 85f456b4-fd51-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 00:30:14 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/18/2015 00:30:07 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/17/2015 11:54:04 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/17/2015 11:53:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/12/2015 06:01:30 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/12/2015 06:00:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (05/19/2015 02:26:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/19/2015 02:26:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/18/2015 05:46:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/18/2015 05:46:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/18/2015 04:04:58 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/18/2015 02:31:50 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/18/2015 01:49:46 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/18/2015 01:04:42 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/18/2015 00:34:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/18/2015 00:34:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3


Microsoft Office Sessions:
=========================
Error: (05/19/2015 07:17:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StreamTransport.exe1.1.6.22a425e19sockhook.dll1.0.2.4365383ffe3c00000050006dc10196c01d0925738cd449cC:\Program Files (x86)\StreamTransport\StreamTransport.exeC:\Program Files (x86)\StreamTransport\sockhook.dlle61dfe96-fe4a-11e4-a8d7-bc5ff4214faa

Error: (05/18/2015 01:38:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe42.0.2311.15273801d0915eed51ec3816C:\Program Files (x86)\Google\Chrome\Application\chrome.exe58da90be-fd52-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 01:36:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe42.0.2311.152d3c01d0915ea02be54316C:\Program Files (x86)\Google\Chrome\Application\chrome.exe1936f958-fd52-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 01:32:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe42.0.2311.152f0401d0915658d7600510C:\Program Files (x86)\Google\Chrome\Application\chrome.exe85f456b4-fd51-11e4-8b0f-bc5ff4214faa

Error: (05/18/2015 00:30:14 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/18/2015 00:30:07 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/17/2015 11:54:04 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/17/2015 11:53:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/12/2015 06:01:30 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/12/2015 06:00:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe


==================== Memory info =========================== 

Processor: AMD FX(tm)-6100 Six-Core Processor 
Percentage of memory in use: 56%
Total physical RAM: 8149.64 MB
Available physical RAM: 3526.76 MB
Total Pagefile: 16297.47 MB
Available Pagefile: 10457.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:36.42 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 155EF49A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hier stehen ja auch meine namen etc. das möchte ich aber eigentlich nicht. kann man das nicht anders machen?

Den Realnamen als Usernamen hättest Du vorher editieren können, stand auch so in den Regeln. Wird aber vom Forum per Script automatisch gemacht nach einiger Zeit.


Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 15-05-19.01 - Greg Daniels 21.05.2015  18:57:14.1.6 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8150.6673 [GMT 2:00]
ausgeführt von:: c:\users\Greg Daniels\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Greg Daniels\AppData\Roaming\AcroIEHelpe.txt
c:\users\Greg Daniels\AppData\Roaming\BAcroIEHelpe181.dll
c:\users\Greg Daniels\AppData\Roaming\BAcroIEHelpe183.dll
c:\users\Greg Daniels\AppData\Roaming\srvblck5.tmp
c:\users\Greg Daniels\AppData\Roaming\uq3rxlpi.default.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-04-21 bis 2015-05-21  ))))))))))))))))))))))))))))))
.
.
2015-05-20 17:47 . 2015-05-20 17:47	--------	d-----w-	c:\program files (x86)\StreamTransport
2015-05-20 17:33 . 2015-05-20 17:39	--------	d-----w-	c:\users\Greg Daniels\.mediathek3
2015-05-19 18:22 . 2015-05-19 18:24	--------	d-----w-	C:\FRST
2015-05-19 17:43 . 2013-06-10 04:14	971680	----a-w-	c:\windows\system32\deployJava1.dll
2015-05-19 17:43 . 2013-06-10 04:14	1092512	----a-w-	c:\windows\system32\npDeployJava1.dll
2015-05-19 17:42 . 2015-05-19 17:42	--------	d-----w-	c:\program files (x86)\Common Files\Java
2015-05-18 18:18 . 2015-05-18 18:18	--------	d-----w-	c:\programdata\FreeDownloadManager.ORG
2015-05-18 18:18 . 2015-05-18 18:18	--------	d-----w-	c:\users\Greg Daniels\AppData\Roaming\FreeDownloadManager.ORG
2015-05-18 18:18 . 2015-05-18 18:25	--------	d-----w-	c:\program files (x86)\Free Download Manager
2015-05-18 00:11 . 2015-04-19 22:58	12032440	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{3DC67DA1-BAA9-4300-8323-F73EE95DF028}\mpengine.dll
2015-05-17 18:42 . 2015-05-18 18:22	--------	d-----w-	c:\users\Greg Daniels\AppData\Local\JDownloader 2.0
2015-04-26 15:37 . 2015-04-26 19:02	--------	d-----w-	c:\users\Tinka\AppData\Local\Microsoft Games
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-19 17:42 . 2013-06-10 04:14	319584	----a-w-	c:\windows\system32\javaws.exe
2015-05-19 17:42 . 2013-06-10 04:14	206944	----a-w-	c:\windows\system32\javaw.exe
2015-05-19 17:42 . 2013-06-10 04:14	206432	----a-w-	c:\windows\system32\java.exe
2015-05-19 17:42 . 2013-06-10 04:14	110688	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2015-05-19 17:40 . 2014-12-01 20:43	97888	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-05-19 17:32 . 2014-04-25 18:25	136408	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-04-14 18:49 . 2012-09-12 22:15	778416	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-04-14 18:49 . 2012-09-12 22:15	142512	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-04-14 07:37 . 2014-05-18 16:53	63704	----a-w-	c:\windows\system32\drivers\mwac.sys
2015-04-14 07:37 . 2014-05-18 16:53	107736	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2015-04-14 07:37 . 2014-05-18 16:53	25816	----a-w-	c:\windows\system32\drivers\mbam.sys
2015-02-24 02:17 . 2012-05-05 09:32	295552	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-12-12 186408]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-11-20 767176]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-04-30 334896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AOD"="c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe" [2014-11-20 344064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys;c:\windows\SYSNATIVE\Drivers\androidusb.sys [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbfake.sys [x]
R3 IT9135BDA;IT9135 BDA Devices;c:\windows\system32\Drivers\IT9135BDA.sys;c:\windows\SYSNATIVE\Drivers\IT9135BDA.sys [x]
R3 LADF_BakerCOnly;BakerC Filter Driver;c:\windows\system32\DRIVERS\ladfBakerCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfBakerCamd64.sys [x]
R3 LADF_BakerROnly;BakerR Filter Driver;c:\windows\system32\DRIVERS\ladfBakerRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfBakerRamd64.sys [x]
R3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
R3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\dddskx64.sys;c:\windows\SYSNATIVE\drivers\dddskx64.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2015-05-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-12 18:49]
.
2015-05-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22 18:10]
.
2015-05-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22 18:10]
.
2015-05-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job
- c:\users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-15 14:15]
.
2015-05-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job
- c:\users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-15 14:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-05-18 11855976]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2014-04-15 10396440]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2014-05-19 3100440]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = www.google.com
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = www.google.com
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.2.1
.
.
------- Dateityp-Verknüpfung -------
.
JSEFile=%SystemRoot%\SysWow64\CScript.exe "%1" %*
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-ASRockXTU - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
   1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
   72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
   94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
   df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*a*€^Pt]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*a*€^Pt\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*g*Z³i\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*w*a*.mp3\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*w*a*by\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*w*a*pàÚs\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*‚IZ¾3�ø¾Aó1¢*€ÿÿ]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*‚IZ¾3�ø¾Aó1¢*€ÿÿ\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*éUJI™*9
.æ	1**�€*]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*éUJI™*9
.æ	1**�€*\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*p{5]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*p{5\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-05-21  19:08:12
ComboFix-quarantined-files.txt  2015-05-21 17:08
.
Vor Suchlauf: 15 Verzeichnis(se), 34.281.676.800 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 35.378.372.608 Bytes frei
.
- - End Of File - - 201085B96292AB36C6A2A06281612D29
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

so hier nun die logfiles:

Malwarebytes Anti-Malware

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 25.05.2015
Suchlauf-Zeit: 13:12:09
Logdatei: mbamlog.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.25.03
Rootkit Datenbank: v2015.05.24.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Greg Daniels

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 462640
Verstrichene Zeit: 17 Min, 22 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

- - -

AdwCleaner Logfile:

# AdwCleaner v4.205 - Bericht erstellt 25/05/2015 um 13:49:58
# Aktualisiert 21/05/2015 von Xplode
# Datenbank : 2015-05-24.1 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x64)
# Benutzername : Greg Daniels - GREGDANIELS-PC
# Gestarted von : C:\Users\Greg Daniels\Downloads\AdwCleaner_4.205.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Users\Greg Daniels\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Greg Daniels\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Greg Daniels\AppData\Roaming\IHlpr
Ordner Gelöscht : C:\Users\Greg Daniels\Documents\Mobogenie
Datei Gelöscht : C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppdjnkblmcjfnlogjjhpigpdgpcgdpll
Datei Gelöscht : C:\Users\Greg Daniels\daemonprocess.txt
Datei Gelöscht : C:\Users\Greg Daniels\AppData\Roaming\TGCMembers.xls
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\sweet-page.xml
Datei Gelöscht : C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Datei Gelöscht : C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}

***** [ Internetbrowser ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Mozilla Firefox v


-\\ Google Chrome v42.0.2311.152

[C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : jifflliplgeajjdhmkcfnngfpgbjonjg
[C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : mpfeggemggokijeahnacacopejaabljl

-\\ Chromium v


*************************

AdwCleaner[R0].txt - [11908 Bytes] - [16/10/2013 22:03:29]
AdwCleaner[R1].txt - [345 Bytes] - [19/05/2015 19:27:16]
AdwCleaner[R2].txt - [341 Bytes] - [19/05/2015 19:28:08]
AdwCleaner[R3].txt - [345 Bytes] - [19/05/2015 19:32:14]
AdwCleaner[R4].txt - [341 Bytes] - [19/05/2015 19:36:00]
AdwCleaner[R5].txt - [345 Bytes] - [19/05/2015 19:59:42]
AdwCleaner[R6].txt - [3410 Bytes] - [25/05/2015 13:47:14]
AdwCleaner[S0].txt - [11469 Bytes] - [16/10/2013 22:07:07]
AdwCleaner[S1].txt - [3234 Bytes] - [25/05/2015 13:49:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3293  Bytes] ##########
         

--- --- ---



- - -

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.9 (05.24.2015:1)
OS: Windows 7 Ultimate x64
Ran by Greg Daniels on 25.05.2015 at 13:55:40,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{01D27A58-EA9D-49C5-B365-6D654EE11C5E}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{030F19D1-6122-4D13-AE18-AADC78BE8F9A}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{08AF46F7-578C-45A4-8946-277F3F6E08E4}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{0D37885C-E20C-45C7-8A80-0EA933E09CC9}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{296ECFCA-825B-4372-A11D-B116E098088D}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{3201CD88-D072-4F8A-B61F-B4AC34CA4867}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{375F017D-566C-4EA1-B09A-8A1A0A4CBB79}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{3BE7867B-1C0D-4A49-99AA-4E28614DCD21}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{4DB29642-CC10-4C4C-A184-5A4E28CCBCF1}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{4F34E7A7-1D8F-41FD-8D95-F46C4083E8AB}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{515786B8-D5A9-47E5-9B73-9675FC7AC982}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{5498D842-3E56-46FD-979A-FE09E5FDE178}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{64987259-28C6-4479-9681-DC0766A24268}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{68C3FFA1-C63F-4455-B623-0E41AC64D29C}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{76D2F727-CFF6-440E-A732-020D81B37006}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{7C678133-31D3-42C6-9DD1-25582C5AE39A}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{8298B233-C57A-473A-A32B-B9E09B71E5AE}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{910C62D0-1646-494F-B0A6-D215860E850B}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{91B313E7-5C3A-4B8B-B7B0-33869F678FB6}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{91CB400B-0CA5-44BC-A07A-BF4432588CF1}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{99AE891A-F5D9-483C-B501-FB986D65E47E}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{9E7D1116-5ADD-4655-B25C-CBA79297E8ED}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{A33DC491-C56B-404E-BEDE-6FC4C3704F6A}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{B0D52836-D8CA-46B8-B000-1D8F9AE40FC5}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{B34B5C82-8622-4F76-AF23-D5151C50E87E}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{B98DCEA2-9013-4496-819E-E14066D504BA}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{C326BFCE-B477-4D24-B2CE-02716826B3AB}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{C7EF985F-6B19-4E03-942F-5C518C151140}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{CC5B0C15-9FF6-48B7-85A0-E1B95D9ECF62}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{D2B6CBCC-FEDF-4F3D-9E76-A2DC271A8C29}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{D2FFC35C-D65C-408B-8B19-A1440A4E554F}
Successfully deleted: [Empty Folder] C:\Users\Greg Daniels\appdata\local\{DD12A253-8ABA-4701-BEE5-A87C0C54E244}
Successfully deleted: [Folder] C:\Users\Greg Daniels\appdata\local\crashrpt
Successfully deleted: [Folder] C:\Windows\syswow64\ai_recyclebin





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.05.2015 at 13:58:29,67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- - -

FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2015 01
Ran by Greg Daniels (administrator) on GREGDANIELS-PC on 25-05-2015 14:02:49
Running from C:\Users\Greg Daniels\Desktop
Loaded Profiles: Greg Daniels (Available Profiles: Greg Daniels & Tinka & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKU\S-1-5-18\...\RunOnce: [AOD] => C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-06-10] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2012-05-24] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @coreonline.com/run3d,version=1.0 -> C:\Users\Greg Daniels\AppData\LocalLow\Square Enix\nprun3d.dll [2012-08-23] (Square Enix)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-12-25]
FF HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Greg Daniels\AppData\Roaming\14001.019

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR Profile: C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-21]
CHR Extension: (Google Drive) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-23]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2012-10-10]
CHR Extension: (AdBlock) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-05-16]
CHR Extension: (Bookmark Manager) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2014-01-23]
CHR Extension: (Earth) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac [2014-05-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) []
S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1220608 2009-05-06] (MAGIX AG) []
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) []
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) []
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-05] (DT Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2012-05-19] (ITE                      )
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-25 14:02 - 2015-05-25 14:03 - 00014498 _____ () C:\Users\Greg Daniels\Desktop\FRST.txt
2015-05-25 14:02 - 2015-05-25 14:02 - 02108416 _____ (Farbar) C:\Users\Greg Daniels\Desktop\FRST64.exe
2015-05-25 14:02 - 2015-05-25 14:02 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\FRST-OlderVersion
2015-05-25 13:58 - 2015-05-25 13:58 - 00004364 _____ () C:\Users\Greg Daniels\Desktop\JRT.txt
2015-05-25 13:55 - 2015-05-25 13:55 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-GREGDANIELS-PC-Windows-7-Ultimate-(64-bit).dat
2015-05-25 13:55 - 2015-05-25 13:55 - 00000000 ____D () C:\RegBackup
2015-05-25 13:55 - 2015-05-25 13:46 - 02222592 _____ () C:\Users\Greg Daniels\Desktop\AdwCleaner_4.205.exe
2015-05-25 13:54 - 2015-05-25 13:54 - 02945770 _____ (Thisisu) C:\Users\Greg Daniels\Downloads\JRT.exe
2015-05-25 13:54 - 2015-05-25 13:54 - 02945770 _____ (Thisisu) C:\Users\Greg Daniels\Desktop\JRT.exe
2015-05-25 13:53 - 2015-05-25 13:53 - 00003373 _____ () C:\Users\Greg Daniels\Desktop\AdwCleaner[S1].txt
2015-05-25 13:46 - 2015-05-25 13:46 - 02222592 _____ () C:\Users\Greg Daniels\Downloads\AdwCleaner_4.205.exe
2015-05-25 13:11 - 2015-05-25 13:11 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-25 13:11 - 2015-05-25 13:11 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-25 13:11 - 2015-05-25 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-25 13:11 - 2015-05-25 13:11 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-25 13:11 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-25 13:11 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-25 13:11 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-25 13:09 - 2015-05-25 13:10 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Greg Daniels\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-25 02:22 - 2015-05-25 02:23 - 1896842324 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.15_15-30_sport1_150_TVOON_DE.mpg.avi
2015-05-24 23:43 - 2015-05-24 23:43 - 00001679 _____ () C:\Users\Greg Daniels\Downloads\z4-gt3-endurance.ini
2015-05-24 23:42 - 2015-05-24 23:43 - 00001679 _____ () C:\Users\Greg Daniels\Downloads\z4-gt3.ini
2015-05-24 16:49 - 2015-05-24 16:49 - 00000000 ____D () C:\ProgramData\CyberKiko
2015-05-24 16:48 - 2015-05-24 16:49 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\RLCN AC
2015-05-24 13:59 - 2015-05-24 13:59 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\FTP_Sync_RLCN
2015-05-24 00:56 - 2015-05-24 00:58 - 110274359 _____ () C:\Users\Greg Daniels\Downloads\Skin_Vorlagen_RLCN.zip
2015-05-24 00:56 - 2015-05-24 00:56 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\Apps_package
2015-05-24 00:25 - 2015-05-24 00:26 - 03757497 _____ () C:\Users\Greg Daniels\Downloads\FTP_Sync_RLCN.zip
2015-05-24 00:22 - 2015-05-24 00:23 - 13147550 _____ () C:\Users\Greg Daniels\Downloads\Apps_package.zip
2015-05-24 00:07 - 2015-05-24 00:07 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\tn_t-drdoomslab_v0.5
2015-05-23 23:10 - 2015-05-23 23:29 - 244701999 _____ () C:\Users\Greg Daniels\Downloads\tn_t-drdoomslab_v0.5.rar
2015-05-23 19:35 - 2015-05-23 19:35 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\fujispeedway
2015-05-23 19:33 - 2015-05-23 19:34 - 35333796 _____ () C:\Users\Greg Daniels\Downloads\fujispeedway.rar
2015-05-23 19:06 - 2015-05-23 19:06 - 00000000 ____D () C:\Users\Greg Daniels\AC_fuel_usage
2015-05-23 17:07 - 2015-05-23 17:08 - 1510585982 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_24_Stunden_Rennen_15.05.15_22-00_sport1_120_TVOON_DE.mpg.HQ.avi
2015-05-23 17:06 - 2015-05-23 17:06 - 684240140 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.14_23-45_sport1_60_TVOON_DE.mpg.avi
2015-05-23 15:49 - 2015-05-23 15:51 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\Pcars Userdata
2015-05-21 22:35 - 2015-05-21 22:37 - 1618872842 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.16_21-30_sport1_150_TVOON_DE.mpg.HQ.avi
2015-05-21 19:08 - 2015-05-21 19:08 - 00021474 _____ () C:\ComboFix.txt
2015-05-21 18:54 - 2015-05-21 19:08 - 00000000 ____D () C:\Qoobox
2015-05-21 18:54 - 2015-05-21 19:08 - 00000000 ____D () C:\ComboFix
2015-05-21 18:54 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-21 18:54 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-21 18:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-21 18:53 - 2015-05-21 19:06 - 00000000 ____D () C:\Windows\erdnt
2015-05-21 18:53 - 2015-05-21 18:53 - 05627500 ____R (Swearware) C:\Users\Greg Daniels\Desktop\ComboFix.exe
2015-05-21 18:52 - 2015-05-21 18:53 - 05627500 _____ (Swearware) C:\Users\Greg Daniels\Downloads\ComboFix.exe
2015-05-20 19:51 - 2015-05-20 19:51 - 00000000 ____D () C:\Users\Greg Daniels\Documents\StreamTransport
2015-05-20 19:48 - 2015-05-20 19:50 - 00003241 _____ () C:\Users\Greg Daniels\Documents\event08-lh.streaming.sport1.de2510964.f4f
2015-05-20 19:48 - 2015-05-20 19:48 - 00000013 _____ () C:\Users\Greg Daniels\Documents\event08-lh.streaming.sport1.de2510964.flv
2015-05-20 19:47 - 2015-05-20 19:47 - 00001095 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2015-05-20 19:47 - 2015-05-20 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2015-05-20 19:47 - 2015-05-20 19:47 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2015-05-20 19:39 - 2015-05-20 19:39 - 00000964 _____ () C:\Users\Greg Daniels\Desktop\MediathekView__Start - Verknüpfung.lnk
2015-05-20 19:33 - 2015-05-20 19:39 - 00000000 ____D () C:\Users\Greg Daniels\.mediathek3
2015-05-20 19:32 - 2015-05-20 19:39 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\mediathekview_9
2015-05-19 20:23 - 2015-05-19 20:26 - 00037746 _____ () C:\Users\Greg Daniels\Downloads\FRST.txt
2015-05-19 20:23 - 2015-05-19 20:24 - 00041472 _____ () C:\Users\Greg Daniels\Downloads\Addition.txt
2015-05-19 20:22 - 2015-05-25 14:02 - 00000000 ____D () C:\FRST
2015-05-19 20:20 - 2015-05-19 20:20 - 02107904 _____ (Farbar) C:\Users\Greg Daniels\Downloads\FRST64.exe
2015-05-19 19:43 - 2013-06-10 06:14 - 01092512 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-05-19 19:43 - 2013-06-10 06:14 - 00971680 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-05-19 19:12 - 2015-05-20 19:46 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2
2015-05-19 19:01 - 2015-05-19 19:01 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\fast_video_download-5.0.1.48-fx
2015-05-19 18:53 - 2015-05-19 18:54 - 2099419632 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.17_14-00_sport1_145_TVOON_DE.mpg.HQ.avi
2015-05-18 20:18 - 2015-05-18 20:25 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\FreeDownloadManager.ORG
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\ProgramData\FreeDownloadManager.ORG
2015-05-18 20:14 - 2015-05-18 20:15 - 10725888 _____ (FreeDownloadManager.ORG ) C:\Users\Greg Daniels\Downloads\fdminst.exe
2015-05-18 19:05 - 2015-05-18 19:07 - 1637278132 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 4____07-30_avi.avi
2015-05-18 18:17 - 2015-05-18 18:18 - 1551307328 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 3____21-30_avi.avi
2015-05-17 23:27 - 2015-05-17 23:29 - 1567080718 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 2_HQ.avi
2015-05-17 22:31 - 2015-05-17 22:33 - 2274659012 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Start_avi.avi
2015-05-17 20:51 - 2015-05-17 20:51 - 00002190 _____ () C:\Users\Greg Daniels\Desktop\JDownloader 2.lnk
2015-05-17 20:51 - 2015-05-17 20:51 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-05-17 20:42 - 2015-05-18 20:22 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 2.0
2015-05-10 23:30 - 2015-05-10 23:30 - 533762583 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Das_Rennen_15.05.10_14-00_rtl_105_TVOON_DE.mpg.mp4
2015-05-02 14:22 - 2015-05-02 14:26 - 30630588 _____ () C:\Users\Greg Daniels\Downloads\Adelaide1988_AC_V1_2.7z
2015-04-26 17:37 - 2015-04-26 21:02 - 00000000 ____D () C:\Users\Tinka\AppData\Local\Microsoft Games
2015-04-25 19:23 - 2015-04-25 19:23 - 00000000 ____D () C:\Users\Greg Daniels\Documents\The Crew

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-25 14:03 - 2012-06-22 20:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-25 14:03 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-25 14:03 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-25 13:56 - 2012-05-05 00:47 - 01636676 _____ () C:\Windows\WindowsUpdate.log
2015-05-25 13:52 - 2012-06-22 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-25 13:52 - 2012-05-19 15:30 - 00000048 _____ () C:\monitor.log
2015-05-25 13:50 - 2014-04-10 20:31 - 00088468 _____ () C:\Windows\PFRO.log
2015-05-25 13:50 - 2014-04-02 04:04 - 00125955 _____ () C:\Windows\setupact.log
2015-05-25 13:50 - 2013-10-16 22:02 - 00000000 ____D () C:\AdwCleaner
2015-05-25 13:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-25 13:49 - 2012-05-05 00:51 - 00000000 ____D () C:\Users\Greg Daniels
2015-05-25 13:48 - 2013-01-30 22:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-25 13:10 - 2012-09-15 22:05 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job
2015-05-25 02:45 - 2014-05-11 01:21 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\vlc
2015-05-25 01:59 - 2014-01-08 08:02 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{45EFE841-25F4-426C-93DC-FCEDCACE6945}
2015-05-25 01:21 - 2012-07-08 00:31 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\TS3Client
2015-05-25 01:20 - 2013-03-11 03:49 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-25 00:10 - 2012-09-15 22:05 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job
2015-05-24 01:24 - 2014-06-23 17:59 - 00000828 _____ () C:\Users\Greg Daniels\Desktop\r+v.txt
2015-05-23 18:45 - 2015-04-20 18:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-05-21 19:08 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-21 19:05 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-19 20:02 - 2014-02-03 00:48 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2015-05-19 20:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization
2015-05-19 19:50 - 2012-05-05 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Mozilla
2015-05-19 19:43 - 2014-03-01 00:13 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-19 19:43 - 2013-06-10 06:14 - 00000000 ____D () C:\Program Files\Java
2015-05-19 19:42 - 2013-06-10 06:14 - 00319584 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-05-19 19:41 - 2014-03-01 00:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-19 19:40 - 2014-12-01 22:43 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-19 19:40 - 2013-05-31 17:33 - 00000000 ____D () C:\Program Files (x86)\Java
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-19 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2015-05-18 20:26 - 2012-12-15 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\DVDVideoSoft
2015-05-18 12:52 - 2009-07-14 19:58 - 00697912 _____ () C:\Windows\system32\perfh007.dat
2015-05-18 12:52 - 2009-07-14 19:58 - 00148608 _____ () C:\Windows\system32\perfc007.dat
2015-05-18 12:52 - 2009-07-14 07:13 - 01616098 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 04:58 - 2012-06-22 20:10 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-18 04:58 - 2012-06-22 20:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-18 00:05 - 2012-09-15 22:05 - 00004132 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA
2015-05-18 00:05 - 2012-09-15 22:05 - 00003736 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core
2015-05-17 20:51 - 2014-05-10 16:16 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 0.9
2015-05-12 23:20 - 2015-04-11 16:39 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\tinka
2015-05-10 15:55 - 2012-09-19 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTCC 2006
2015-05-08 19:58 - 2014-12-04 23:22 - 00000098 _____ () C:\Users\Tinka\Desktop\Neues Textdokument.txt
2015-05-05 23:03 - 2015-03-09 20:40 - 00002546 _____ () C:\Users\Greg Daniels\Desktop\Neues Textdokument (2).txt
2015-04-25 19:24 - 2014-12-25 21:51 - 00000000 ____D () C:\Users\Greg Daniels\Documents\ProfileCache

==================== Files in the root of some directories =======

2014-04-27 19:21 - 2014-05-20 20:45 - 0000011 _____ () C:\Users\Greg Daniels\AppData\Roaming\ApplicationVersion.txt
2012-08-23 22:20 - 2012-09-11 03:04 - 0000034 _____ () C:\Users\Greg Daniels\AppData\Roaming\blckdom.res
2014-02-03 02:13 - 2014-03-16 05:16 - 0000114 _____ () C:\Users\Greg Daniels\AppData\Roaming\Camdata.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamLayout.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamShapes.ini
2014-02-03 00:53 - 2014-03-16 05:16 - 0004548 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamStudio.cfg
2012-08-01 18:28 - 2012-09-20 03:56 - 0000037 _____ () C:\Users\Greg Daniels\AppData\Roaming\urhtps.dat
2014-02-03 00:48 - 2014-03-16 04:02 - 0000096 _____ () C:\Users\Greg Daniels\AppData\Roaming\version2.xml
2014-03-12 22:32 - 2014-03-12 22:32 - 0000600 _____ () C:\Users\Greg Daniels\AppData\Roaming\winscp.rnd
2012-08-05 00:23 - 2014-02-06 20:02 - 0003584 _____ () C:\Users\Greg Daniels\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-24 15:37 - 2014-12-24 15:37 - 0000026 _____ () C:\Users\Greg Daniels\AppData\Local\isoworkshop.ini
2013-01-01 23:04 - 2013-01-03 17:09 - 0001501 _____ () C:\Users\Greg Daniels\AppData\Local\RecConfig.xml
2013-04-07 23:53 - 2013-04-07 23:53 - 0049482 _____ () C:\Users\Greg Daniels\AppData\Local\recently-used.xbel
2012-05-05 22:41 - 2014-04-26 17:44 - 0007603 _____ () C:\Users\Greg Daniels\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Greg Daniels\AppData\Local\Temp\Quarantine.exe
C:\Users\Greg Daniels\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 17:19

==================== End of log ============================
         

- - -

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-05-2015 01
Ran by Greg Daniels at 2015-05-25 14:03:57
Running from C:\Users\Greg Daniels\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1978074120-1168334530-1069948001-500 - Administrator - Disabled) => C:\Users\Administrator
Gast (S-1-5-21-1978074120-1168334530-1069948001-501 - Limited - Disabled)
Greg Daniels (S-1-5-21-1978074120-1168334530-1069948001-1000 - Administrator - Enabled) => C:\Users\Greg Daniels
HomeGroupUser$ (S-1-5-21-1978074120-1168334530-1069948001-1008 - Limited - Enabled)
Tinka (S-1-5-21-1978074120-1168334530-1069948001-1013 - Limited - Enabled) => C:\Users\Tinka

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Alcatech BPM Studio Professional v4.9.1 (HKLM-x32\...\Alcatech BPM Studio Professional v4.9.1) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{74292F90-895A-4FC6-A692-9641532B1B63}) (Version: 3.5.28.322 - ArcSoft)
ASRock eXtreme Tuner v0.1.122 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
Assetto Corsa (HKLM-x32\...\Steam App 244210) (Version:  - Kunos Simulazioni)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.6.1 - BitTorrent Inc.)
Bulk Rename Utility 2.7.1.3 (HKLM\...\Bulk Rename Utility_is1) (Version:  - TGRMN Software)
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CCleaner (HKLM\...\CCleaner) (Version: 3.19 - Piriform)
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
DVR Configuration Tool (HKLM-x32\...\{FCEE0D0C-FF8D-4552-A6C5-67ECE0F82EF9}) (Version: 1.0.9 - Pearl Agency GmbH)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{AF37F9DE-0726-439E-BC10-43D9195394D0}) (Version: 2.1.26.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
GetFoldersize 2.5.15 (HKLM-x32\...\GetFoldersize_is1) (Version: 2.5.15 - Michael Thummerer Software Design)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)
Hitman Absolution (HKLM-x32\...\Hitman Absolution_is1) (Version:  - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\7289-1030-5602-7421) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
MAGIX Music Maker 16 Premium Download-Version (HKLM-x32\...\MAGIX Music Maker 16 Premium Download-Version D) (Version: 16.0.0.30 - MAGIX AG)
MAGIX Screenshare (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (HKLM-x32\...\MAGIX Speed burnR D) (Version: 7.0.1.27 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.56 - Peter Lorenz)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MULTIWEB FinMail Client (HKLM-x32\...\MULTIWEB FinMail Client) (Version:  - )
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - )
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
RaceRoom Racing Experience  (HKLM-x32\...\Steam App 211500) (Version:  - Sector3 Studios)
RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - SimBin)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6378 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Shutdown Timer (HKLM\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems)
Square Enix Secure Launcher (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Square Enix Secure Launcher) (Version: 1.0.0.106 - Square Enix)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
StreamTransport version: 1.1.6.2 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 6.3.13.0 - 2BrightSparks)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Vegas Pro 10.0 (HKLM-x32\...\{3C8CDDCF-D09A-11DF-8BB6-0013D3D69929}) (Version: 10.0.387 - Sony)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WRC 4 FIA World Rally Championship (HKLM-x32\...\V1JDNEZJQVdvcmxkUmFsbHlDaGFtcGlvbnNoaXA=_is1) (Version: 1 - )
XSplit (HKLM-x32\...\{24570B2F-3937-47F0-A16A-E82B480A7699}) (Version: 1.1.1210.3101 - SplitMediaLabs)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)

==================== Restore Points =========================

24-05-2015 17:25:59 Geplanter Prüfpunkt

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-05-21 19:05 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B345E2F-AB83-4CF9-A1D4-EF2DA9C3796B} - System32\Tasks\{048949AF-0030-4A6C-A490-FBE7983874EC} => pcalua.exe -a "C:\Users\Greg Daniels\Downloads\pCARS_0226_0_build_10_pre-alpha_PC-EXT_SFX.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {0C553865-EF19-448C-89E4-1D0C426FD006} - \Plus-HD-2.6-chromeinstaller No Task File <==== ATTENTION
Task: {243D843E-4F31-4EBB-955B-CAB94EF1447C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {43A294C9-FA6F-43DA-A82B-F785F314EB34} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {4AE49558-6F02-4C08-8447-A0BE42C294C1} - \Plus-HD-2.6-enabler No Task File <==== ATTENTION
Task: {591E7FA1-B37A-4ED6-8F76-0993B9A9002B} - System32\Tasks\{A0DF0DE5-F2E8-42DF-86AA-244D0D7E9271} => pcalua.exe -a "C:\Users\Greg Daniels\AppData\Roaming\sweet-page\UninstallManager.exe" -c -ptid=cor
Task: {8DEFF3AD-D770-410C-B3EC-6B6A70816E7B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {964114A5-29DB-48E7-9B04-1D8074AF84B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {A2557E3D-3E64-4503-9E5F-C393507110A0} - \Plus-HD-2.6-updater No Task File <==== ATTENTION
Task: {C2AE3E8F-2BBC-4CC4-ACB0-8698E7FD1F79} - System32\Tasks\irMonitor => C:\Windows\system32\IRMonitor.exe [2012-05-19] (ITE Tech. Inc.)
Task: {D30EEDDB-8486-4F6C-8F53-4E46A8CA25D9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {DF0733C9-DDFB-448A-868E-B93DAC856BB3} - System32\Tasks\{153BE79C-06FE-4C2A-BF6E-96BFF87BF7FD} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/228800
Task: {EA40EE81-5164-4F9D-9B2E-E523C9E00265} - System32\Tasks\{1206CED3-2F7C-4754-A0EA-EFA4BA8C2946} => C:\Users\Greg Daniels\Downloads\3d Sim Editor & Trkmaker with all support files tutorials & patches\3DsimED v2.6a\3DSIMED.EXE
Task: {EFECA3F3-380E-4EDC-838F-1C0A1CB01841} - \Plus-HD-2.6-codedownloader No Task File <==== ATTENTION
Task: {F46F8E40-704B-4A9A-8B9E-FA1128961001} - \Plus-HD-2.6-firefoxinstaller No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-12-08 12:10 - 2014-12-08 12:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-05-05 13:49 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER Error getting ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{5C772C56-8367-456F-A6A9-7720F647221F}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{2EF12006-7D96-4274-B5EF-13D822701CB9}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{1380BB40-BFE0-4D4D-8957-300C628B88DF}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{9BB40361-7894-433C-BEEA-9A0B60981692}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{F3C3BBB9-03E2-4435-9774-E189205DD6D5}] => (Allow) LPort=5353
FirewallRules: [{21D472EB-37D1-4E85-9870-0139E3841D04}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{26942412-7E8A-47FA-B599-D10A6CB80699}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{822692A4-0237-404A-A20C-95A225DED8CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29780BE4-41CA-4F3D-A973-0D076E7A1967}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{72AF4E2C-4393-4873-8AC7-DB5F3F0C70E6}] => (Allow) LPort=5910
FirewallRules: [{AC1C6A5C-4615-414F-A546-1AC9D0FFEEBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{3E3DB74B-964E-4B90-9C40-30C9C4AC4A65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{65913E53-5C3C-41B0-8419-1654019CA8EC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{06A213A8-C71B-4FAC-8777-E87DC9B0E137}] => (Allow) LPort=2869
FirewallRules: [{BCD76253-8F8B-41E5-8D9C-981C22B52DE2}] => (Allow) LPort=1900
FirewallRules: [{95EC8F1D-4CD9-498A-B0A7-12B0B9DEA925}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DB711672-787C-41B8-BB40-4FB31C9DC9CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{478AEE22-4B3B-4885-BF7E-7AAFA5EB66A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{42003686-2E2F-4C52-B70F-8313A2958CAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F6425086-2394-4219-99D2-98FB6EB6DEC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{89EB0698-219E-4B07-B656-DF9522CD889F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{4C3374B4-0C3D-48FE-8841-A84122C85AF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{442D3E9F-2719-4DAC-AF8C-B93CD239719E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{60BC6CCC-0981-4FD9-8DD0-FD6C3E8AA61F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{9AC23BE3-3024-40E0-A1D6-BC163BF53A9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{74B521E9-C4F6-4E90-B38E-F33F4DD02F05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{607E6B4B-904D-4CC8-B5F2-11D4CB33B6F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{70C8D89B-3F53-449F-8B2C-425F52652A96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DFA29F84-F790-4866-951F-9FCA1CFB83B3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F376BACA-D4B9-4C77-8341-07B5686C6D25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{49DFC5E4-AE9A-48D6-B9AE-099C8331E7E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{2F24D1D8-92BB-4DD5-955A-B719A9999ADB}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B688EFB3-43B0-44C7-A484-E3203DB4B129}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{63D1D0F3-3EF1-400E-898A-F358B7D2865C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{938B911B-517F-4902-88DC-A1832CA1E8B9}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4BCA378E-3091-4A34-87CC-8ED4C1E7BB65}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{823850EA-5936-4204-8B5B-7257E068A911}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{F17188AF-B872-4393-B439-5E12B666089B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{DACBD4E9-D966-47A4-9CE5-0C2218A8EE94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{01768CD2-172C-45E6-82D7-65E86F4DB30C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{BAF7B97B-F8A3-4FA1-895E-F857FC50138F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{B3053AAF-C0C7-4FD3-B547-1F37058F3C57}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3EC16C90-1C99-4B15-B5EC-FDB7EC0B7933}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{16E323CD-799F-41CE-9A29-FFFB1D784D1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0A15399D-9651-43FE-9F7C-8D9BB24427C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1AAEF83E-DCC0-4400-B9D5-BF9F2C2BA842}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{CAA23F88-3F27-4B57-9ED0-7704C661CAED}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{91FF7D87-B0D9-47FE-9F73-BB2326092344}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: AODDriver4.01
Description: AODDriver4.01
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.01
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/24/2015 05:20:15 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/24/2015 05:19:30 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/23/2015 06:13:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: acs.exe, Version: 0.0.0.0, Zeitstempel: 0x553787dd
Name des fehlerhaften Moduls: kernel32.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1115
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000e030c
ID des fehlerhaften Prozesses: 0x1570
Startzeit der fehlerhaften Anwendung: 0xacs.exe0
Pfad der fehlerhaften Anwendung: acs.exe1
Pfad des fehlerhaften Moduls: acs.exe2
Berichtskennung: acs.exe3

Error: (05/22/2015 08:39:44 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/22/2015 08:38:53 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/20/2015 09:43:38 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/20/2015 09:42:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/20/2015 07:51:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StreamTransport.exe, Version: 1.1.6.2, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000343e0
ID des fehlerhaften Prozesses: 0x660
Startzeit der fehlerhaften Anwendung: 0xStreamTransport.exe0
Pfad der fehlerhaften Anwendung: StreamTransport.exe1
Pfad des fehlerhaften Moduls: StreamTransport.exe2
Berichtskennung: StreamTransport.exe3

Error: (05/19/2015 07:17:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StreamTransport.exe, Version: 1.1.6.2, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: sockhook.dll, Version: 1.0.2.436, Zeitstempel: 0x5383ffe3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006dc10
ID des fehlerhaften Prozesses: 0x196c
Startzeit der fehlerhaften Anwendung: 0xStreamTransport.exe0
Pfad der fehlerhaften Anwendung: StreamTransport.exe1
Pfad des fehlerhaften Moduls: StreamTransport.exe2
Berichtskennung: StreamTransport.exe3

Error: (05/18/2015 01:38:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm chrome.exe, Version 42.0.2311.152 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 738

Startzeit: 01d0915eed51ec38

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Berichts-ID: 58da90be-fd52-11e4-8b0f-bc5ff4214faa


System errors:
=============
Error: (05/25/2015 01:56:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/25/2015 01:56:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/25/2015 01:56:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "FABS - Helping agent for MAGIX media database" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 01:56:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 01:56:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ArcSoft Connect Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 01:56:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/25/2015 01:56:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AMD External Events Utility" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 01:50:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/25/2015 01:50:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/25/2015 01:50:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109


Microsoft Office:
=========================
Error: (05/24/2015 05:20:15 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/24/2015 05:19:30 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/23/2015 06:13:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: acs.exe0.0.0.0553787ddkernel32.dll6.1.7601.1822951fb1115c0000005000e030c157001d0956be519ea3cC:\Program Files (x86)\Steam\steamapps\common\assettocorsa\acs.exeC:\Windows\syswow64\kernel32.dlla817a546-0166-11e5-9e3b-bc5ff4214faa

Error: (05/22/2015 08:39:44 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/22/2015 08:38:53 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/20/2015 09:43:38 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/20/2015 09:42:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/20/2015 07:51:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StreamTransport.exe1.1.6.22a425e19ntdll.dll6.1.7601.18247521ea8e7c0000005000343e066001d093250c8417bcC:\Program Files (x86)\StreamTransport\StreamTransport.exeC:\Windows\SysWOW64\ntdll.dllda5c74fa-ff18-11e4-82b1-bc5ff4214faa

Error: (05/19/2015 07:17:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StreamTransport.exe1.1.6.22a425e19sockhook.dll1.0.2.4365383ffe3c00000050006dc10196c01d0925738cd449cC:\Program Files (x86)\StreamTransport\StreamTransport.exeC:\Program Files (x86)\StreamTransport\sockhook.dlle61dfe96-fe4a-11e4-a8d7-bc5ff4214faa

Error: (05/18/2015 01:38:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe42.0.2311.15273801d0915eed51ec3816C:\Program Files (x86)\Google\Chrome\Application\chrome.exe58da90be-fd52-11e4-8b0f-bc5ff4214faa


CodeIntegrity Errors:
===================================
  Date: 2015-05-21 19:05:09.341
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-21 19:05:09.232
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: AMD FX(tm)-6100 Six-Core Processor 
Percentage of memory in use: 19%
Total physical RAM: 8149.64 MB
Available physical RAM: 6526.54 MB
Total Pagefile: 16297.47 MB
Available Pagefile: 14646.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:26.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 155EF49A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of log ============================
         

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Eine Frage zu ESET: Am Ende muss ich da nicht den Hacken setzen bei: Anwendungen nach dem Schließen deinstallieren?
Habe jetzt natürlich nicht gemacht.


LOG ESET:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=d71f151fa139ea4996090c728887af8e
# engine=24119
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-01 05:55:52
# local_time=2015-06-01 07:55:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 97791 184811202 0 0
# scanned=314596
# found=110
# cleaned=0
# scan_time=9330
sh=319AC4A74D9A9A759EAB6C0A4A8D68B180DA285F ft=1 fh=af6e06be7dab2a61 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-1978074120-1168334530-1069948001-1000\$R3G0OGW.exe"
sh=F346D91A2E5F5FBEFF8F19023463F079E6E89B7A ft=0 fh=0000000000000000 vn="Win32/Somoto.Q evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-1978074120-1168334530-1069948001-1000\$RE985P7.zip"
sh=C4E65A43B2504F5B06AA28A471D3BA18C1F45096 ft=1 fh=46474f6586c1d361 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-1978074120-1168334530-1069948001-1000\$RNI9VCT.exe"
sh=2462E5997321849631D19E0FE26C1B5C5D4DD941 ft=1 fh=8db53b7eb68d9eeb vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-1978074120-1168334530-1069948001-1000\$RZMBV4M.exe"
sh=5CC4C7F42BCB76C228BAB044BFA939F8C4F3085C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\33440.crx.vir"
sh=63AC839470C8BBBC66782866CEA3D5B8F9207C08 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\33440.xpi.vir"
sh=AE39FDB922D2B5163FC2E1DF39D5A5C74D1A0699 ft=1 fh=a2ec2d83f0334aa9 vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bg.exe.vir"
sh=F2BCF8654217100BBBDD95946DE2130F1B8E93B1 ft=1 fh=bfbd897f01ffca57 vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho.dll.vir"
sh=6ABFAB896846DA985F570FE32199CBB62ADB20D5 ft=1 fh=918b5744484477e9 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho64.dll.vir"
sh=010FB5217DCA3AEA962F3528FCADA10BA9CC27D2 ft=1 fh=73c9b85927e6ad2a vn="Variante von Win32/Toolbar.CrossRider.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.dll.vir"
sh=F0DBA106B973D03A7FD19B6701DFBACD3F64C019 ft=1 fh=23aecafdc1aa58cb vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.exe.vir"
sh=8DCB0818F0E706BECB4E87B5E875B170FD303A32 ft=1 fh=b7f7ac2c81fed7cc vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.dll.vir"
sh=469704992B5A39B202518DF1A0DF5C6F9822A20F ft=1 fh=ebe8cfcfb265d5d1 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.exe.vir"
sh=01D2A1071F20A6EDCA74CC45E2B723C11CCBC785 ft=1 fh=d460e4fbcb9ec056 vn="Variante von Win32/Toolbar.CrossRider.K evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe.vir"
sh=D631BF98B1F31B323CE6174CAF1F277BACF4E9D1 ft=1 fh=2284448eb99a8a2c vn="Variante von Win32/Toolbar.CrossRider.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe.vir"
sh=41F835FA152C8AC5E2214C1D4E419E785A8DD720 ft=1 fh=78c6094b6052b727 vn="Variante von Win32/Toolbar.CrossRider.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe.vir"
sh=72EAE905732B7EE1A8F21E6C2E1494217AF7A8ED ft=1 fh=a1bf9314fec5bf9a vn="Variante von Win32/Toolbar.CrossRider.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe.vir"
sh=67348568B44CDEE72143CC03428C3064A3840A3A ft=1 fh=24f521932a14ec20 vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-helper.exe.vir"
sh=E7C0896ACA9A17D6D190D5289BC0B60ED1A33E77 ft=1 fh=c77e7218289cf0ee vn="Variante von Win32/Toolbar.CrossRider.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-updater.exe.vir"
sh=24FD1321325D9CF1F92EDD938A781F252BDBD149 ft=1 fh=155325a7c2c6b421 vn="Win32/Packed.ScrambleWrapper.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.6\utils.exe.vir"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\101_cortica_m.js.vir"
sh=957E505E027C2F899F844C27AC8B82EF94AEBB68 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\102_dealply_m.js.vir"
sh=17F6E2411B6C3A285257D050832B0890BBEC046F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=EB047CB7862459E0F74832AEF6A7954A3663373F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=F2126D68553053F0A5A411866DEC205E27283EDA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\105_corticas_m.js.vir"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\107_coupish_m.js.vir"
sh=6FD52BE8732402A681159484442B6AA0351C4243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\108_icm_m.js.vir"
sh=F0D9BB17EC343592F74C53A4E3E5E460B90DD3E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\116_ads_only_5_m.js.vir"
sh=DFB11E05B62F57EDA18112BC002C17EAFD79BEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=9495814AE107F6739D62A09B1829E5A2DCDA1354 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\120_luck_m.js.vir"
sh=B985E49C6E0E423954A36327BE2EA87F0F287145 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=EAAF312959AC9CCF5138825927B5E2D38F57E2E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\125_arcadi2_m.js.vir"
sh=74355138F1CC2F634308F1A790D5AD1D7C401E23 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=CF3F763C2D37847B8BA8D2FE67BFDCB903725348 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\127_revizer_p_m.js.vir"
sh=4A86247BDE5D2225473389037FA942819FD677CF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\129_widdit_m.js.vir"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\135_arcadi3_m.js.vir"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\142_intext_fa_m.js.vir"
sh=786B0C8D3A9F6EFBCDB103B0FA7F9460D38C5D7B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=A28CB6571CE8071F7AC0A6BA249259A684E96292 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=CD6C49370804B033E758D7EC277EA0D08B95B890 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\170_icm1_5_m.js.vir"
sh=81C3B657563171D65FE42C52872ECF8EB7924C86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=63D3217BF16BFB37091DD90C82E573D8CA13F08E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\1_base.js.vir"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\21_debug.js.vir"
sh=57F2136CD86B69E88017E3346CF16BE0C2A51A2B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\28_initializer.js.vir"
sh=92DD07C2421C2C5A4996E399DB6707B4707488F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\92_superfish_m.js.vir"
sh=AFD9829F5C599DA11A6F662604DFB5A53FA88B08 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=CCE2C38E8E351E54EF7624D60D5C8E8943A8C1D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl\1.25.113_0\js\lib\crossriderAPI.js.vir"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\101_cortica_m.js.vir"
sh=957E505E027C2F899F844C27AC8B82EF94AEBB68 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\102_dealply_m.js.vir"
sh=17F6E2411B6C3A285257D050832B0890BBEC046F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\103_intext_5_m.js.vir"
sh=EB047CB7862459E0F74832AEF6A7954A3663373F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\104_jollywallet_m.js.vir"
sh=F2126D68553053F0A5A411866DEC205E27283EDA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\105_corticas_m.js.vir"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\107_coupish_m.js.vir"
sh=6FD52BE8732402A681159484442B6AA0351C4243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\108_icm_m.js.vir"
sh=F0D9BB17EC343592F74C53A4E3E5E460B90DD3E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\116_ads_only_5_m.js.vir"
sh=DFB11E05B62F57EDA18112BC002C17EAFD79BEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=9495814AE107F6739D62A09B1829E5A2DCDA1354 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\119_similar_web_m.js.vir"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\120_luck_m.js.vir"
sh=B985E49C6E0E423954A36327BE2EA87F0F287145 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\123_intext_adv_m.js.vir"
sh=EAAF312959AC9CCF5138825927B5E2D38F57E2E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\125_arcadi2_m.js.vir"
sh=E254E0BD5C202A441B4F7415C762F7D537A79E24 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=5B79E1012732BA64F2D1FDF7DBF44CAD28FE7CDD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\127_revizer_p_m.js.vir"
sh=4A86247BDE5D2225473389037FA942819FD677CF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\129_widdit_m.js.vir"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\135_arcadi3_m.js.vir"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\142_intext_fa_m.js.vir"
sh=786B0C8D3A9F6EFBCDB103B0FA7F9460D38C5D7B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=A28CB6571CE8071F7AC0A6BA249259A684E96292 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\21_debug.js.vir"
sh=57F2136CD86B69E88017E3346CF16BE0C2A51A2B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\28_initializer.js.vir"
sh=CB95B247FABF95831A2974B87B334DBE4597CEB2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\92_superfish_m.js.vir"
sh=DEF8CB14886F5A427CEB5E70D8C1D395AC135F4A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Greg Daniels\AppData\Roaming\Mozilla\Firefox\Profiles\uq3rxlpi.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=77D7875D42AC6040B7C839AC458675E7B4225270 ft=1 fh=b19d494e813fa82f vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe181.dll.vir"
sh=15C9C486042A6C0A4D749DE1B16E0DF433DD1E56 ft=1 fh=1be1ae023b6dd5c9 vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe183.dll.vir"
sh=2E2BB652F379B4D07CB02EDA1D899F32DC26C75C ft=1 fh=a66cfc69df6b1857 vn="Variante von Win32/InstallCore.LN evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25EH39RM\JDownloaderSetup_CH[1].exe"
sh=5C308DE9610721E5DC203DA91B971348F9F9B5B6 ft=1 fh=412229a66c215446 vn="Variante von Win32/InstallCore.LN evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[1].exe"
sh=5C7A57628A6732C2A9C53DF48809F9847117BD09 ft=1 fh=db0403b1e547a40c vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[2].exe"
sh=3B29C36CCB0FD00A0812896E61D3AE6CE18E5EEE ft=1 fh=5ce1e22016c2ce7d vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\spstub[1].exe"
sh=2E2BB652F379B4D07CB02EDA1D899F32DC26C75C ft=1 fh=a66cfc69df6b1857 vn="Variante von Win32/InstallCore.LN evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AO93NTOL\JDownloaderSetup_CH[1].exe"
sh=5C7A57628A6732C2A9C53DF48809F9847117BD09 ft=1 fh=db0403b1e547a40c vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FN66AR20\JDownloaderSetup_CH[1].exe"
sh=7EF45D49A6873DE8CF18B78DB2111AB27D2B7465 ft=1 fh=e5c5bd7de037036d vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\FRAPS - CHIP-Installer.exe"
sh=57B2DF7A4249FBB4800109AB2505C37E46715570 ft=1 fh=2ab546b9c4f93ff6 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\MediaMonkey - CHIP-Installer.exe"
sh=3B3957ADADB202137B3778FDC6A42FA715962306 ft=1 fh=f39fb2ff56499c21 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\MediaPurge - CHIP-Installer.exe"
sh=3B3ED43D5E5AC88C9A8C3D5CF2AFCC467531626C ft=1 fh=a49769d145275cce vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\MusicBrainz Picard - CHIP-Installer.exe"
sh=075478ED256C74207FB1540F41BE4934B47D549B ft=1 fh=5a1a58d6a5023955 vn="Win32/Somoto.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\streamtransport_chrome_setup1.1.6.2.exe"
sh=E18B5242B0C893DF09E34A9E89DE551503F31591 ft=1 fh=5a1a58d6d884f372 vn="Win32/Somoto.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\Streamtransport IE10\streamtransport_setup.exe"
sh=4D37C83F3FA11539025894A705356FBFB2F7C299 ft=1 fh=27c07e3f4d7d64c3 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tinka\Downloads\FRAPS - CHIP-Installer.exe"
sh=4702F728A447EE977F312AF00B2A85B8B3F4CD4B ft=1 fh=33e7190fadc2f07a vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tinka\Downloads\Greenshot - CHIP-Installer.exe"
sh=6C9FF78F39467E7325B42BC1D77BDC2C110150B0 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\_OTL\MovedFiles.zip"
sh=87119E512AFF3829DC928302C7BEC65D42A33C24 ft=1 fh=9fbc9e70a001aeab vn="Variante von Win32/Spy.Banker.YZT Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\AcroIEHelpe205.dll"
sh=BC538D6202C3F3D71409534FA8E95453B4280E72 ft=1 fh=f90f5f2334a8615e vn="Variante von Win32/Kryptik.AMGL Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\appconf32.exe"
sh=C646D4C93FD2B28DF547679A5462DFE9FCDD0F81 ft=1 fh=ae2b7d44666706e7 vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe197.dll"
sh=506735513C42EFD6A3D650EC2AA19C9385C31900 ft=1 fh=d10e23fbe8fbe906 vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe201.dll"
sh=CBC1C717C361052278ECA2116C64782C22C4C7F4 ft=1 fh=9a1d1a45f8df6cfa vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe202.dll"
sh=454E3AF4913561F6733846214F7C12A5360D33CD ft=1 fh=0c43c72807fd50bb vn="Variante von Win32/Spy.Banker.YUN Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe203.dll"
sh=E4748AF47D99E7952C1010D256F78C1C33322787 ft=1 fh=a6e6b9d1a27bbd51 vn="Variante von Win32/Spy.Banker.YQR Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe204.dll"
sh=AEF536D9FAF101EA55375AC722B76D3C51EA8260 ft=1 fh=cb2c5bec64fdaaec vn="Variante von Win32/Spy.Banker.YQR Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe205.dll"
sh=8EDF919A0A1039E514265EE2BD8AC07CB28C3C2C ft=1 fh=9b3ec5f1972746d8 vn="Variante von Win32/Spy.Banker.YPK Trojaner" ac=I fn="C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\14001.019\components\AcroFF019.dll"
         

Results of screen317's Security Check version 1.002  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 JavaFX 2.1.0    
 Java 8 Update 45  
 Adobe Flash Player 17.0.0.169  
 Adobe Reader 9 Adobe Reader out of Date! 
 Mozilla Thunderbird (31.7.0) 
 Google Chrome (42.0.2311.152) 
 Google Chrome (43.0.2357.81) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2015 01 (ATTENTION: ====> FRSTversion is 8 days old and could be outdated)
Ran by Greg Daniels (administrator) on GREGDANIELS-PC on 01-06-2015 20:39:39
Running from C:\Users\Greg Daniels\Desktop
Loaded Profiles: Greg Daniels (Available Profiles: Greg Daniels & Tinka & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ITE Tech. Inc.) C:\Windows\System32\IRMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKU\S-1-5-18\...\RunOnce: [AOD] => C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-19] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-19] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-06-10] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2012-05-24] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-19] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @coreonline.com/run3d,version=1.0 -> C:\Users\Greg Daniels\AppData\LocalLow\Square Enix\nprun3d.dll [2012-08-23] (Square Enix)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-1978074120-1168334530-1069948001-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-12-25]
FF HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Greg Daniels\AppData\Roaming\14001.019

Chrome: 
=======
CHR Profile: C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-21]
CHR Extension: (Google Drive) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-23]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2012-10-10]
CHR Extension: (AdBlock) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-05-16]
CHR Extension: (Bookmark Manager) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2014-01-23]
CHR Extension: (Earth) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac [2014-05-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Greg Daniels\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) []
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1220608 2009-05-06] (MAGIX AG) []
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) []
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) []
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-05] (DT Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2012-05-19] (ITE                      )
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 20:39 - 2015-06-01 20:40 - 00018953 _____ () C:\Users\Greg Daniels\Desktop\FRST.txt
2015-06-01 20:38 - 2015-06-01 20:40 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\PC bereinigen
2015-06-01 20:34 - 2015-06-01 20:34 - 00852639 _____ () C:\Users\Greg Daniels\Downloads\SecurityCheck.exe
2015-06-01 17:16 - 2015-06-01 17:16 - 02347384 _____ (ESET) C:\Users\Greg Daniels\Downloads\esetsmartinstaller_deu.exe
2015-05-31 18:24 - 2015-05-31 19:35 - 11026890 _____ () C:\Users\Greg Daniels\Desktop\LIVERY_d.psd
2015-05-31 17:03 - 2015-05-31 17:03 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\Skin_Vorlagen_RLCN (1)
2015-05-31 16:59 - 2015-05-31 17:02 - 110274359 _____ () C:\Users\Greg Daniels\Downloads\Skin_Vorlagen_RLCN (1).zip
2015-05-31 16:42 - 2015-05-31 16:42 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\bmw_z4_gt3_V1.6
2015-05-29 22:21 - 2015-05-29 22:21 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\Save_the_ring
2015-05-27 19:32 - 2015-05-29 20:30 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\rlcn36 data
2015-05-27 19:20 - 2015-03-16 19:10 - 00003436 _____ () C:\Users\Greg Daniels\Desktop\surfaces.ini
2015-05-25 18:43 - 2015-05-25 18:43 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\clean_windshield_to_all_cars_in_ac1.0rc
2015-05-25 18:42 - 2015-05-25 18:43 - 22991023 _____ () C:\Users\Greg Daniels\Downloads\clean_windshield_to_all_cars_in_ac1.0rc.rar
2015-05-25 14:02 - 2015-05-25 14:02 - 02108416 _____ (Farbar) C:\Users\Greg Daniels\Desktop\FRST64.exe
2015-05-25 14:02 - 2015-05-25 14:02 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\FRST-OlderVersion
2015-05-25 13:55 - 2015-05-25 13:55 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-GREGDANIELS-PC-Windows-7-Ultimate-(64-bit).dat
2015-05-25 13:55 - 2015-05-25 13:55 - 00000000 ____D () C:\RegBackup
2015-05-25 13:55 - 2015-05-25 13:46 - 02222592 _____ () C:\Users\Greg Daniels\Desktop\AdwCleaner_4.205.exe
2015-05-25 13:54 - 2015-05-25 13:54 - 02945770 _____ (Thisisu) C:\Users\Greg Daniels\Downloads\JRT.exe
2015-05-25 13:54 - 2015-05-25 13:54 - 02945770 _____ (Thisisu) C:\Users\Greg Daniels\Desktop\JRT.exe
2015-05-25 13:46 - 2015-05-25 13:46 - 02222592 _____ () C:\Users\Greg Daniels\Downloads\AdwCleaner_4.205.exe
2015-05-25 13:11 - 2015-05-25 13:11 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-25 13:11 - 2015-05-25 13:11 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-25 13:11 - 2015-05-25 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-25 13:11 - 2015-05-25 13:11 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-25 13:11 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-25 13:11 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-25 13:11 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-25 13:09 - 2015-05-25 13:10 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Greg Daniels\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-25 02:22 - 2015-05-25 02:23 - 1896842324 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.15_15-30_sport1_150_TVOON_DE.mpg.avi
2015-05-24 23:43 - 2015-05-24 23:43 - 00001679 _____ () C:\Users\Greg Daniels\Downloads\z4-gt3-endurance.ini
2015-05-24 23:42 - 2015-05-24 23:43 - 00001679 _____ () C:\Users\Greg Daniels\Downloads\z4-gt3.ini
2015-05-24 16:49 - 2015-05-24 16:49 - 00000000 ____D () C:\ProgramData\CyberKiko
2015-05-24 16:48 - 2015-05-31 19:34 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\RLCN AC
2015-05-24 13:59 - 2015-05-24 13:59 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\FTP_Sync_RLCN
2015-05-24 00:56 - 2015-05-24 00:56 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\Apps_package
2015-05-24 00:25 - 2015-05-24 00:26 - 03757497 _____ () C:\Users\Greg Daniels\Downloads\FTP_Sync_RLCN.zip
2015-05-24 00:22 - 2015-05-24 00:23 - 13147550 _____ () C:\Users\Greg Daniels\Downloads\Apps_package.zip
2015-05-24 00:07 - 2015-05-24 00:07 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\tn_t-drdoomslab_v0.5
2015-05-23 23:10 - 2015-05-23 23:29 - 244701999 _____ () C:\Users\Greg Daniels\Downloads\tn_t-drdoomslab_v0.5.rar
2015-05-23 19:35 - 2015-05-23 19:35 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\fujispeedway
2015-05-23 19:33 - 2015-05-23 19:34 - 35333796 _____ () C:\Users\Greg Daniels\Downloads\fujispeedway.rar
2015-05-23 19:06 - 2015-05-23 19:06 - 00000000 ____D () C:\Users\Greg Daniels\AC_fuel_usage
2015-05-23 17:07 - 2015-05-23 17:08 - 1510585982 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_24_Stunden_Rennen_15.05.15_22-00_sport1_120_TVOON_DE.mpg.HQ.avi
2015-05-23 17:06 - 2015-05-23 17:06 - 684240140 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.14_23-45_sport1_60_TVOON_DE.mpg.avi
2015-05-23 15:49 - 2015-05-23 15:51 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\Pcars Userdata
2015-05-21 22:35 - 2015-05-21 22:37 - 1618872842 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.16_21-30_sport1_150_TVOON_DE.mpg.HQ.avi
2015-05-21 19:08 - 2015-05-21 19:08 - 00021474 _____ () C:\ComboFix.txt
2015-05-21 18:54 - 2015-05-21 19:08 - 00000000 ____D () C:\Qoobox
2015-05-21 18:54 - 2015-05-21 19:08 - 00000000 ____D () C:\ComboFix
2015-05-21 18:54 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-21 18:54 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-21 18:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-21 18:54 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-21 18:53 - 2015-05-21 19:06 - 00000000 ____D () C:\Windows\erdnt
2015-05-21 18:53 - 2015-05-21 18:53 - 05627500 ____R (Swearware) C:\Users\Greg Daniels\Desktop\ComboFix.exe
2015-05-21 18:52 - 2015-05-21 18:53 - 05627500 _____ (Swearware) C:\Users\Greg Daniels\Downloads\ComboFix.exe
2015-05-20 19:51 - 2015-05-20 19:51 - 00000000 ____D () C:\Users\Greg Daniels\Documents\StreamTransport
2015-05-20 19:48 - 2015-05-20 19:50 - 00003241 _____ () C:\Users\Greg Daniels\Documents\event08-lh.streaming.sport1.de2510964.f4f
2015-05-20 19:48 - 2015-05-20 19:48 - 00000013 _____ () C:\Users\Greg Daniels\Documents\event08-lh.streaming.sport1.de2510964.flv
2015-05-20 19:47 - 2015-05-20 19:47 - 00001095 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2015-05-20 19:47 - 2015-05-20 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2015-05-20 19:47 - 2015-05-20 19:47 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2015-05-20 19:39 - 2015-05-20 19:39 - 00000964 _____ () C:\Users\Greg Daniels\Desktop\MediathekView__Start - Verknüpfung.lnk
2015-05-20 19:33 - 2015-05-20 19:39 - 00000000 ____D () C:\Users\Greg Daniels\.mediathek3
2015-05-20 19:32 - 2015-05-20 19:39 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\mediathekview_9
2015-05-19 20:23 - 2015-05-19 20:26 - 00037746 _____ () C:\Users\Greg Daniels\Downloads\FRST.txt
2015-05-19 20:23 - 2015-05-19 20:24 - 00041472 _____ () C:\Users\Greg Daniels\Downloads\Addition.txt
2015-05-19 20:22 - 2015-06-01 20:39 - 00000000 ____D () C:\FRST
2015-05-19 20:20 - 2015-05-19 20:20 - 02107904 _____ (Farbar) C:\Users\Greg Daniels\Downloads\FRST64.exe
2015-05-19 19:43 - 2013-06-10 06:14 - 01092512 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-05-19 19:43 - 2013-06-10 06:14 - 00971680 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-05-19 19:12 - 2015-05-20 19:46 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2
2015-05-19 19:01 - 2015-05-19 19:01 - 00000000 ____D () C:\Users\Greg Daniels\Downloads\fast_video_download-5.0.1.48-fx
2015-05-19 18:53 - 2015-05-19 18:54 - 2099419632 _____ () C:\Users\Greg Daniels\Downloads\Motorsport_Live_24_Stunden_Rennen_15.05.17_14-00_sport1_145_TVOON_DE.mpg.HQ.avi
2015-05-18 20:18 - 2015-05-18 20:25 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\FreeDownloadManager.ORG
2015-05-18 20:18 - 2015-05-18 20:18 - 00000000 ____D () C:\ProgramData\FreeDownloadManager.ORG
2015-05-18 20:14 - 2015-05-18 20:15 - 10725888 _____ (FreeDownloadManager.ORG ) C:\Users\Greg Daniels\Downloads\fdminst.exe
2015-05-18 19:05 - 2015-05-18 19:07 - 1637278132 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 4____07-30_avi.avi
2015-05-18 18:17 - 2015-05-18 18:18 - 1551307328 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 3____21-30_avi.avi
2015-05-17 23:27 - 2015-05-17 23:29 - 1567080718 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Teil 2_HQ.avi
2015-05-17 22:31 - 2015-05-17 22:33 - 2274659012 _____ () C:\Users\Greg Daniels\Downloads\24_Stunden_Rennen_Start_avi.avi
2015-05-17 20:51 - 2015-05-17 20:51 - 00002190 _____ () C:\Users\Greg Daniels\Desktop\JDownloader 2.lnk
2015-05-17 20:51 - 2015-05-17 20:51 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-05-17 20:42 - 2015-05-18 20:22 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 2.0
2015-05-10 23:30 - 2015-05-10 23:30 - 533762583 _____ () C:\Users\Greg Daniels\Downloads\Formel_1__Das_Rennen_15.05.10_14-00_rtl_105_TVOON_DE.mpg.mp4
2015-05-02 14:22 - 2015-05-02 14:26 - 30630588 _____ () C:\Users\Greg Daniels\Downloads\Adelaide1988_AC_V1_2.7z

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 20:36 - 2014-04-02 04:04 - 00127803 _____ () C:\Windows\setupact.log
2015-06-01 20:10 - 2012-09-15 22:05 - 00001148 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job
2015-06-01 20:03 - 2012-06-22 20:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-01 19:48 - 2013-01-30 22:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-01 19:12 - 2012-05-05 00:47 - 01661844 _____ () C:\Windows\WindowsUpdate.log
2015-06-01 17:18 - 2014-12-19 18:14 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\bewerbungen
2015-06-01 13:08 - 2014-01-08 08:02 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{45EFE841-25F4-426C-93DC-FCEDCACE6945}
2015-06-01 13:06 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-01 13:06 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-01 12:59 - 2012-06-22 20:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-01 12:59 - 2012-05-19 15:30 - 00000048 _____ () C:\monitor.log
2015-06-01 12:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-31 22:52 - 2013-03-11 03:49 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-31 22:52 - 2012-07-08 00:31 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\TS3Client
2015-05-31 17:34 - 2012-06-19 01:39 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\Apps\2.0
2015-05-31 01:36 - 2014-05-11 01:21 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\vlc
2015-05-31 01:27 - 2009-07-14 19:58 - 00697912 _____ () C:\Windows\system32\perfh007.dat
2015-05-31 01:27 - 2009-07-14 19:58 - 00148608 _____ () C:\Windows\system32\perfc007.dat
2015-05-31 01:27 - 2009-07-14 07:13 - 01616098 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-31 00:10 - 2012-09-15 22:05 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job
2015-05-25 13:50 - 2014-04-10 20:31 - 00088468 _____ () C:\Windows\PFRO.log
2015-05-25 13:50 - 2013-10-16 22:02 - 00000000 ____D () C:\AdwCleaner
2015-05-25 13:49 - 2012-05-05 00:51 - 00000000 ____D () C:\Users\Greg Daniels
2015-05-24 01:24 - 2014-06-23 17:59 - 00000828 _____ () C:\Users\Greg Daniels\Desktop\r+v.txt
2015-05-23 18:45 - 2015-04-20 18:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-05-21 19:08 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-21 19:05 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-19 20:02 - 2014-02-03 00:48 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2015-05-19 20:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization
2015-05-19 19:50 - 2012-05-05 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\Mozilla
2015-05-19 19:43 - 2014-03-01 00:13 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-19 19:43 - 2013-06-10 06:14 - 00000000 ____D () C:\Program Files\Java
2015-05-19 19:42 - 2013-06-10 06:14 - 00319584 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-05-19 19:42 - 2013-06-10 06:14 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-05-19 19:41 - 2014-03-01 00:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-19 19:40 - 2014-12-01 22:43 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-19 19:40 - 2013-05-31 17:33 - 00000000 ____D () C:\Program Files (x86)\Java
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-19 19:24 - 2012-05-05 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-19 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2015-05-18 20:26 - 2012-12-15 13:47 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Roaming\DVDVideoSoft
2015-05-18 04:58 - 2012-06-22 20:10 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-18 04:58 - 2012-06-22 20:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-18 00:05 - 2012-09-15 22:05 - 00004132 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA
2015-05-18 00:05 - 2012-09-15 22:05 - 00003736 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core
2015-05-17 20:51 - 2014-05-10 16:16 - 00000000 ____D () C:\Users\Greg Daniels\AppData\Local\JDownloader 0.9
2015-05-12 23:20 - 2015-04-11 16:39 - 00000000 ____D () C:\Users\Greg Daniels\Desktop\tinka
2015-05-10 15:55 - 2012-09-19 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTCC 2006
2015-05-08 19:58 - 2014-12-04 23:22 - 00000098 _____ () C:\Users\Tinka\Desktop\Neues Textdokument.txt
2015-05-05 23:03 - 2015-03-09 20:40 - 00002546 _____ () C:\Users\Greg Daniels\Desktop\Neues Textdokument (2).txt

==================== Files in the root of some directories =======

2014-04-27 19:21 - 2014-05-20 20:45 - 0000011 _____ () C:\Users\Greg Daniels\AppData\Roaming\ApplicationVersion.txt
2012-08-23 22:20 - 2012-09-11 03:04 - 0000034 _____ () C:\Users\Greg Daniels\AppData\Roaming\blckdom.res
2014-02-03 02:13 - 2014-03-16 05:16 - 0000114 _____ () C:\Users\Greg Daniels\AppData\Roaming\Camdata.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamLayout.ini
2014-02-03 02:13 - 2014-03-16 05:16 - 0000408 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamShapes.ini
2014-02-03 00:53 - 2014-03-16 05:16 - 0004548 _____ () C:\Users\Greg Daniels\AppData\Roaming\CamStudio.cfg
2012-08-01 18:28 - 2012-09-20 03:56 - 0000037 _____ () C:\Users\Greg Daniels\AppData\Roaming\urhtps.dat
2014-02-03 00:48 - 2014-03-16 04:02 - 0000096 _____ () C:\Users\Greg Daniels\AppData\Roaming\version2.xml
2014-03-12 22:32 - 2014-03-12 22:32 - 0000600 _____ () C:\Users\Greg Daniels\AppData\Roaming\winscp.rnd
2012-08-05 00:23 - 2014-02-06 20:02 - 0003584 _____ () C:\Users\Greg Daniels\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-24 15:37 - 2014-12-24 15:37 - 0000026 _____ () C:\Users\Greg Daniels\AppData\Local\isoworkshop.ini
2013-01-01 23:04 - 2013-01-03 17:09 - 0001501 _____ () C:\Users\Greg Daniels\AppData\Local\RecConfig.xml
2013-04-07 23:53 - 2013-04-07 23:53 - 0049482 _____ () C:\Users\Greg Daniels\AppData\Local\recently-used.xbel
2012-05-05 22:41 - 2014-04-26 17:44 - 0007603 _____ () C:\Users\Greg Daniels\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Greg Daniels\AppData\Local\Temp\Quarantine.exe
C:\Users\Greg Daniels\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 17:19

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-05-2015 01
Ran by Greg Daniels at 2015-06-01 20:40:47
Running from C:\Users\Greg Daniels\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1978074120-1168334530-1069948001-500 - Administrator - Disabled) => C:\Users\Administrator
Gast (S-1-5-21-1978074120-1168334530-1069948001-501 - Limited - Disabled)
Greg Daniels (S-1-5-21-1978074120-1168334530-1069948001-1000 - Administrator - Enabled) => C:\Users\Greg Daniels
HomeGroupUser$ (S-1-5-21-1978074120-1168334530-1069948001-1008 - Limited - Enabled)
Tinka (S-1-5-21-1978074120-1168334530-1069948001-1013 - Limited - Enabled) => C:\Users\Tinka

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Alcatech BPM Studio Professional v4.9.1 (HKLM-x32\...\Alcatech BPM Studio Professional v4.9.1) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{74292F90-895A-4FC6-A692-9641532B1B63}) (Version: 3.5.28.322 - ArcSoft)
ASRock eXtreme Tuner v0.1.122 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
Assetto Corsa (HKLM-x32\...\Steam App 244210) (Version:  - Kunos Simulazioni)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.6.1 - BitTorrent Inc.)
Bulk Rename Utility 2.7.1.3 (HKLM\...\Bulk Rename Utility_is1) (Version:  - TGRMN Software)
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CCleaner (HKLM\...\CCleaner) (Version: 3.19 - Piriform)
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
DVR Configuration Tool (HKLM-x32\...\{FCEE0D0C-FF8D-4552-A6C5-67ECE0F82EF9}) (Version: 1.0.9 - Pearl Agency GmbH)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{AF37F9DE-0726-439E-BC10-43D9195394D0}) (Version: 2.1.26.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
GetFoldersize 2.5.15 (HKLM-x32\...\GetFoldersize_is1) (Version: 2.5.15 - Michael Thummerer Software Design)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)
Hitman Absolution (HKLM-x32\...\Hitman Absolution_is1) (Version:  - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\7289-1030-5602-7421) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
MAGIX Music Maker 16 Premium Download-Version (HKLM-x32\...\MAGIX Music Maker 16 Premium Download-Version D) (Version: 16.0.0.30 - MAGIX AG)
MAGIX Screenshare (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (HKLM-x32\...\MAGIX Speed burnR D) (Version: 7.0.1.27 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.56 - Peter Lorenz)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MULTIWEB FinMail Client (HKLM-x32\...\MULTIWEB FinMail Client) (Version:  - )
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - )
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
RaceRoom Racing Experience  (HKLM-x32\...\Steam App 211500) (Version:  - Sector3 Studios)
RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - SimBin)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6378 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Shutdown Timer (HKLM\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems)
Square Enix Secure Launcher (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\Square Enix Secure Launcher) (Version: 1.0.0.106 - Square Enix)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
StreamTransport version: 1.1.6.2 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 6.3.13.0 - 2BrightSparks)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Vegas Pro 10.0 (HKLM-x32\...\{3C8CDDCF-D09A-11DF-8BB6-0013D3D69929}) (Version: 10.0.387 - Sony)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WRC 4 FIA World Rally Championship (HKLM-x32\...\V1JDNEZJQVdvcmxkUmFsbHlDaGFtcGlvbnNoaXA=_is1) (Version: 1 - )
XSplit (HKLM-x32\...\{24570B2F-3937-47F0-A16A-E82B480A7699}) (Version: 1.1.1210.3101 - SplitMediaLabs)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1978074120-1168334530-1069948001-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Greg Daniels\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)

==================== Restore Points =========================

01-06-2015 16:45:50 Geplanter Prüfpunkt

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-05-21 19:05 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B345E2F-AB83-4CF9-A1D4-EF2DA9C3796B} - System32\Tasks\{048949AF-0030-4A6C-A490-FBE7983874EC} => pcalua.exe -a "C:\Users\Greg Daniels\Downloads\pCARS_0226_0_build_10_pre-alpha_PC-EXT_SFX.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {0C553865-EF19-448C-89E4-1D0C426FD006} - \Plus-HD-2.6-chromeinstaller No Task File <==== ATTENTION
Task: {243D843E-4F31-4EBB-955B-CAB94EF1447C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {43A294C9-FA6F-43DA-A82B-F785F314EB34} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {4AE49558-6F02-4C08-8447-A0BE42C294C1} - \Plus-HD-2.6-enabler No Task File <==== ATTENTION
Task: {591E7FA1-B37A-4ED6-8F76-0993B9A9002B} - System32\Tasks\{A0DF0DE5-F2E8-42DF-86AA-244D0D7E9271} => pcalua.exe -a "C:\Users\Greg Daniels\AppData\Roaming\sweet-page\UninstallManager.exe" -c -ptid=cor
Task: {8DEFF3AD-D770-410C-B3EC-6B6A70816E7B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {964114A5-29DB-48E7-9B04-1D8074AF84B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22] (Google Inc.)
Task: {A2557E3D-3E64-4503-9E5F-C393507110A0} - \Plus-HD-2.6-updater No Task File <==== ATTENTION
Task: {C2AE3E8F-2BBC-4CC4-ACB0-8698E7FD1F79} - System32\Tasks\irMonitor => C:\Windows\system32\IRMonitor.exe [2012-05-19] (ITE Tech. Inc.)
Task: {D30EEDDB-8486-4F6C-8F53-4E46A8CA25D9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-15] (Google Inc.)
Task: {DF0733C9-DDFB-448A-868E-B93DAC856BB3} - System32\Tasks\{153BE79C-06FE-4C2A-BF6E-96BFF87BF7FD} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/228800
Task: {EA40EE81-5164-4F9D-9B2E-E523C9E00265} - System32\Tasks\{1206CED3-2F7C-4754-A0EA-EFA4BA8C2946} => C:\Users\Greg Daniels\Downloads\3d Sim Editor & Trkmaker with all support files tutorials & patches\3DsimED v2.6a\3DSIMED.EXE
Task: {EFECA3F3-380E-4EDC-838F-1C0A1CB01841} - \Plus-HD-2.6-codedownloader No Task File <==== ATTENTION
Task: {F46F8E40-704B-4A9A-8B9E-FA1128961001} - \Plus-HD-2.6-firefoxinstaller No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000Core.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1978074120-1168334530-1069948001-1000UA.job => C:\Users\Greg Daniels\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-11-20 22:23 - 2014-11-20 22:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2014-12-08 12:10 - 2014-12-08 12:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-05-05 13:49 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2014-02-11 20:21 - 2014-02-11 20:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-02-11 20:22 - 2014-02-11 20:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-02-11 20:21 - 2014-02-11 20:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-02-11 20:22 - 2014-02-11 20:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-11-20 22:23 - 2014-11-20 22:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-05-25 19:06 - 2015-05-22 23:09 - 01670472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll
2015-05-25 19:06 - 2015-05-22 23:09 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll
2015-05-25 19:06 - 2015-05-22 23:09 - 26787144 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1978074120-1168334530-1069948001-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Greg Daniels\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER Error getting ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{5C772C56-8367-456F-A6A9-7720F647221F}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{2EF12006-7D96-4274-B5EF-13D822701CB9}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{1380BB40-BFE0-4D4D-8957-300C628B88DF}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{9BB40361-7894-433C-BEEA-9A0B60981692}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{F3C3BBB9-03E2-4435-9774-E189205DD6D5}] => (Allow) LPort=5353
FirewallRules: [{21D472EB-37D1-4E85-9870-0139E3841D04}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{26942412-7E8A-47FA-B599-D10A6CB80699}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{822692A4-0237-404A-A20C-95A225DED8CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29780BE4-41CA-4F3D-A973-0D076E7A1967}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{72AF4E2C-4393-4873-8AC7-DB5F3F0C70E6}] => (Allow) LPort=5910
FirewallRules: [{AC1C6A5C-4615-414F-A546-1AC9D0FFEEBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{3E3DB74B-964E-4B90-9C40-30C9C4AC4A65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{65913E53-5C3C-41B0-8419-1654019CA8EC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{06A213A8-C71B-4FAC-8777-E87DC9B0E137}] => (Allow) LPort=2869
FirewallRules: [{BCD76253-8F8B-41E5-8D9C-981C22B52DE2}] => (Allow) LPort=1900
FirewallRules: [{95EC8F1D-4CD9-498A-B0A7-12B0B9DEA925}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DB711672-787C-41B8-BB40-4FB31C9DC9CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{478AEE22-4B3B-4885-BF7E-7AAFA5EB66A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{42003686-2E2F-4C52-B70F-8313A2958CAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F6425086-2394-4219-99D2-98FB6EB6DEC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{89EB0698-219E-4B07-B656-DF9522CD889F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{4C3374B4-0C3D-48FE-8841-A84122C85AF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{442D3E9F-2719-4DAC-AF8C-B93CD239719E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{60BC6CCC-0981-4FD9-8DD0-FD6C3E8AA61F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{9AC23BE3-3024-40E0-A1D6-BC163BF53A9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{74B521E9-C4F6-4E90-B38E-F33F4DD02F05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{607E6B4B-904D-4CC8-B5F2-11D4CB33B6F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{70C8D89B-3F53-449F-8B2C-425F52652A96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{DFA29F84-F790-4866-951F-9FCA1CFB83B3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS.exe
FirewallRules: [{F376BACA-D4B9-4C77-8341-07B5686C6D25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{49DFC5E4-AE9A-48D6-B9AE-099C8331E7E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{2F24D1D8-92BB-4DD5-955A-B719A9999ADB}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B688EFB3-43B0-44C7-A484-E3203DB4B129}] => (Allow) C:\Users\Greg Daniels\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{63D1D0F3-3EF1-400E-898A-F358B7D2865C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{938B911B-517F-4902-88DC-A1832CA1E8B9}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4BCA378E-3091-4A34-87CC-8ED4C1E7BB65}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{823850EA-5936-4204-8B5B-7257E068A911}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{F17188AF-B872-4393-B439-5E12B666089B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{DACBD4E9-D966-47A4-9CE5-0C2218A8EE94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\raceroom racing experience\Game\RRRE.exe
FirewallRules: [{01768CD2-172C-45E6-82D7-65E86F4DB30C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{BAF7B97B-F8A3-4FA1-895E-F857FC50138F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{B3053AAF-C0C7-4FD3-B547-1F37058F3C57}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3EC16C90-1C99-4B15-B5EC-FDB7EC0B7933}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{16E323CD-799F-41CE-9A29-FFFB1D784D1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0A15399D-9651-43FE-9F7C-8D9BB24427C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1AAEF83E-DCC0-4400-B9D5-BF9F2C2BA842}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{CAA23F88-3F27-4B57-9ED0-7704C661CAED}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{8BF187D2-00EB-4B18-8ABB-BD44900914FB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: AODDriver4.01
Description: AODDriver4.01
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.01
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2015 08:40:58 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/01/2015 08:31:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/01/2015 05:17:25 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/01/2015 05:17:22 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/01/2015 03:18:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (06/01/2015 03:17:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/28/2015 08:31:42 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/28/2015 08:30:55 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/27/2015 07:25:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.3.0, Zeitstempel: 0x00000004
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.3.0, Zeitstempel: 0x00000004
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000018c5
ID des fehlerhaften Prozesses: 0x18c4
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (05/26/2015 09:09:42 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (06/01/2015 02:14:16 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (06/01/2015 00:59:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/01/2015 00:59:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/31/2015 10:18:47 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/31/2015 07:42:33 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/31/2015 07:03:29 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/31/2015 05:57:23 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/31/2015 01:54:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/31/2015 01:54:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.01" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (05/31/2015 00:37:18 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D592CF26-058F-4053-8F3B-EC15CE720A96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office:
=========================
Error: (06/01/2015 08:40:58 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg Daniels\Downloads\esetsmartinstaller_deu.exe

Error: (06/01/2015 08:31:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (06/01/2015 05:17:25 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg Daniels\Downloads\esetsmartinstaller_deu.exe

Error: (06/01/2015 05:17:22 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Greg Daniels\Downloads\esetsmartinstaller_deu.exe

Error: (06/01/2015 03:18:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (06/01/2015 03:17:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/28/2015 08:31:42 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/28/2015 08:30:55 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Native.XSplitBroadcaster.exe,type="win32",version="1.0.0.0"C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplitBroadcasterSrc.exe

Error: (05/27/2015 07:25:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.1.3.000000004vlc.exe2.1.3.000000004c0000005000018c518c401d098994cea9589C:\Program Files (x86)\VideoLAN\VLC\vlc.exeC:\Program Files (x86)\VideoLAN\VLC\vlc.exe5e8ac2e8-0495-11e5-82a5-bc5ff4214faa

Error: (05/26/2015 09:09:42 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


CodeIntegrity Errors:
===================================
  Date: 2015-05-21 19:05:09.341
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-21 19:05:09.232
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: AMD FX(tm)-6100 Six-Core Processor 
Percentage of memory in use: 62%
Total physical RAM: 8149.64 MB
Available physical RAM: 3092.24 MB
Total Pagefile: 16297.47 MB
Available Pagefile: 10044.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:28.83 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 155EF49A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of log ============================
         

sorry, leider nicht früher zu gekommen.

Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\$RECYCLE.BIN

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25EH39RM\JDownloaderSetup_CH[1].exe

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[1].exe

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[2].exe

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\spstub[1].exe

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AO93NTOL\JDownloaderSetup_CH[1].exe

C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FN66AR20\JDownloaderSetup_CH[1].exe

C:\Users\Greg Daniels\Downloads\FRAPS - CHIP-Installer.exe

C:\Users\Greg Daniels\Downloads\MediaMonkey - CHIP-Installer.exe

C:\Users\Greg Daniels\Downloads\MediaPurge - CHIP-Installer.exe

C:\Users\Greg Daniels\Downloads\MusicBrainz Picard - CHIP-Installer.exe

C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\streamtransport_chrome_setup1.1.6.2.exe

C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\Streamtransport IE10\streamtransport_setup.exe

C:\Users\Tinka\Downloads\FRAPS - CHIP-Installer.exe

C:\Users\Tinka\Downloads\Greenshot - CHIP-Installer.exe

C:\_OTL\MovedFiles.zip

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\AcroIEHelpe205.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\appconf32.exe

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe197.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe201.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe202.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe203.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe204.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe205.dll

C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\14001.019\components\AcroFF019.dll
Task: {0C553865-EF19-448C-89E4-1D0C426FD006} - \Plus-HD-2.6-chromeinstaller No Task File <==== ATTENTION

Task: {4AE49558-6F02-4C08-8447-A0BE42C294C1} - \Plus-HD-2.6-enabler No Task File <==== ATTENTION

Task: {A2557E3D-3E64-4503-9E5F-C393507110A0} - \Plus-HD-2.6-updater No Task File <==== ATTENTION

Task: {EFECA3F3-380E-4EDC-838F-1C0A1CB01841} - \Plus-HD-2.6-codedownloader No Task File <==== ATTENTION

Task: {F46F8E40-704B-4A9A-8B9E-FA1128961001} - \Plus-HD-2.6-firefoxinstaller No Task File <==== ATTENTION
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Downloadverhalten überdenken:
CHIP-Installer - was ist das? - Anleitungen


Noch Probleme?

Vielen Dank bisher, werde es gleich ausführen und den Log posten.

Aber ich hatte noch eine Frage, wahrscheinlich unter gegangen, kein Problem. Deswegen frage ich lieber nochmal

"Eine Frage zu ESET: Am Ende muss ich da nicht den Hacken setzen bei: Anwendungen nach dem Schließen deinstallieren?
Habe jetzt natürlich nicht gemacht."

Mein Download verhalten was den Chip Installer etc. angeht werde ich Gründlich überdenken. Lieber direkt beim Hersteller.. ?!

C:\$RECYCLE.BIN => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25EH39RM\JDownloaderSetup_CH[1].exe => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[1].exe => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\JDownloaderSetup_CH[2].exe => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RBK36XB\spstub[1].exe => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AO93NTOL\JDownloaderSetup_CH[1].exe => moved successfully.
C:\Users\Greg Daniels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FN66AR20\JDownloaderSetup_CH[1].exe => moved successfully.
C:\Users\Greg Daniels\Downloads\FRAPS - CHIP-Installer.exe => moved successfully.
C:\Users\Greg Daniels\Downloads\MediaMonkey - CHIP-Installer.exe => moved successfully.
C:\Users\Greg Daniels\Downloads\MediaPurge - CHIP-Installer.exe => moved successfully.
C:\Users\Greg Daniels\Downloads\MusicBrainz Picard - CHIP-Installer.exe => moved successfully.
C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\streamtransport_chrome_setup1.1.6.2.exe => moved successfully.
C:\Users\Greg Daniels\Downloads\streamtransport_1.1.6.2\Streamtransport IE10\streamtransport_setup.exe => moved successfully.
C:\Users\Tinka\Downloads\FRAPS - CHIP-Installer.exe => moved successfully.
C:\Users\Tinka\Downloads\Greenshot - CHIP-Installer.exe => moved successfully.
C:\_OTL\MovedFiles.zip => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\AcroIEHelpe205.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\appconf32.exe => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe197.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe201.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe202.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe203.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe204.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\BAcroIEHelpe205.dll => moved successfully.
C:\_OTL\MovedFiles\09202012_200943\C_Users\Greg Daniels\AppData\Roaming\14001.019\components\AcroFF019.dll => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C553865-EF19-448C-89E4-1D0C426FD006}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C553865-EF19-448C-89E4-1D0C426FD006}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-chromeinstaller" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4AE49558-6F02-4C08-8447-A0BE42C294C1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4AE49558-6F02-4C08-8447-A0BE42C294C1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-enabler" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A2557E3D-3E64-4503-9E5F-C393507110A0}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2557E3D-3E64-4503-9E5F-C393507110A0}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-updater" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EFECA3F3-380E-4EDC-838F-1C0A1CB01841}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFECA3F3-380E-4EDC-838F-1C0A1CB01841}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-codedownloader" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F46F8E40-704B-4A9A-8B9E-FA1128961001}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F46F8E40-704B-4A9A-8B9E-FA1128961001}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-firefoxinstaller" => key removed successfully
EmptyTemp: => 967.8 MB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 20:41:05 ====

Hersteller, oder bei Seiten die keinen Downloadmanager anbieten, kannst auch bei uns laden:

FilePony.de

ESET einfach deinstallieren

Bestehen noch Probleme mit dem System?

meinst du das Programm Deinstallieren, oder Am Ende des Programms muss ich da nicht den Hacken setzen bei: Anwendungen nach dem Schließen deinstallieren?
Habe jetzt natürlich noch nicht gemacht. Soll ich das noch machen? Oder nur das Programm deinstallieren?

ESET kannste jetzt deinstallieren, unter Programme und FUnktionen in der Systemsteuerung.



Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.


Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.