Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Was soll ich mit der Datei utils.cdneurope.com virus tun??? (https://www.trojaner-board.de/158450-datei-utils-cdneurope-com-virus-tun.html)

martin26 08.09.2014 18:45
Was soll ich mit der Datei utils.cdneurope.com virus tun???
 
Hallo
ich habe auf meinem Laptop als Schutz den kaspersky. Dieser zeigt mir seit ca einer woche an das er die datei utils.cdneurope.com virus blockiert. seit diesem zeitpunkt hängt sich auch der laptop immer wieder auf. was kann ich tun?? danke jetzt schon mal für hilfe!!
lg martin

schrauber 08.09.2014 18:49
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


martin26 08.09.2014 20:05

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01
Ran by Martin (administrator) on MARTIN-PC on 08-09-2014 20:54:22
Running from C:\Users\Martin\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\lpksetup.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe
(GoPro) C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Suunto) C:\Users\Martin\AppData\Local\Apps\2.0\GY9MXZB6.8P0\K193595Z.LQP\move..tion_3ccae3cb2a36e2f5_0001.0002_a975bf06beb701f6\Moveslink2.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Suunto Oy) C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\Moveslink.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\wmi64.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\System32\lpksetup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Moveslink2] => C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Amazon Music] => C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe [3356480 2014-07-22] ()
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: F - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {07aaa07a-6282-11e3-9759-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {08712ecf-3adf-11e3-a9f4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {188766fe-0d44-11e2-8df2-001e101fe5e1} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {5f38a2f7-03d5-11e2-9e60-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351b89-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351ba7-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bb0-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bc2-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6adb667d-0c03-11e4-9268-4c8093367f49} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef87fa-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8810-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8865-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8876-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8897-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88a6-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88d9-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {c39fcf8c-7903-11e3-9734-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9313b-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9314a-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f02-0be1-11e2-a991-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f62-0be1-11e2-a991-001e101f859f} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290304-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229031d-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290334-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290358-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290363-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229037a-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290392-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229039d-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903a7-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903bc-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903ca-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903e8-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903eb-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {e7e517d9-7244-11e3-bc8b-4c8093367f49} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {f2d0801c-0d88-11e2-b423-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CineForm Status.lnk
ShortcutTarget: CineForm Status.lnk -> C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink for Movestick Mini.lnk
ShortcutTarget: Moveslink for Movestick Mini.lnk -> C:\Windows\Installer\{4D036ACA-DFDF-41B2-A680-E0D736F3E947}\_22A9010B636AF7A61D8E03.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKCU - {A81A4E1D-058D-469D-A8E0-4871449ECA9A} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\Parameters: [DhcpNameServer] 195.202.138.3 195.202.128.3 62.40.128.2
Tcpip\..\Interfaces\{4ABF2963-5275-4EAA-8261-86889517C5B8}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{56052A40-478E-4C77-B083-882DC7023837}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{E09F3F10-7BA9-4DCB-9D6A-9C97DA0E3135}: [NameServer] 213.94.78.16 213.94.78.17

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default
FF Homepage: https://www.google.at/?gws_rd=ssl
FF Keyword.URL: https://at.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=888596&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @ei.UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISB.dll (Utility Chest)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-20]
FF Extension: Website Counselor - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{cc6cc772-f121-49e0-b1f0-c26583cb0c5e} [2014-09-08]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Modul zum Sperren von gefährlichen Webseiten - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址過濾 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Sicherer Zahlungsverkehr - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-09-06]

Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2012-11-08]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-04-06]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2012-11-08]
CHR Extension: (Anti-Banner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2012-11-08]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-30] (Adobe Systems) [File not signed]
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-05-19] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1335360 2011-05-19] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-05-19] (Intel Corporation) [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] () [File not signed]
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-12-09] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2014-07-02] (ITE                      )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140352 2014-09-06] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792128 2014-09-06] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-08 19:56 - 2014-09-08 19:57 - 00059740 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 19:54 - 2014-09-08 20:55 - 00033523 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-08 19:53 - 2014-09-08 20:55 - 00000000 ____D () C:\FRST
2014-09-08 19:53 - 2014-09-08 20:45 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-08 19:52 - 2014-09-08 19:52 - 02105344 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-08 19:21 - 2014-09-08 19:21 - 00144760 _____ () C:\Users\Martin\Downloads\Flash_Player_Pro_Setup.exe
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 21:34 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-06 21:34 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-06 21:33 - 2014-09-06 21:34 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:32 - 2014-09-06 23:05 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:32 - 2014-09-06 21:36 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-06 21:28 - 2014-09-06 21:29 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 19:15 - 2014-09-08 20:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 19:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 19:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-06 18:44 - 2014-09-06 18:47 - 00000000 ____D () C:\AdwCleaner
2014-09-06 11:16 - 2014-09-08 20:53 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-06 11:16 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-09-06 11:15 - 2014-09-06 11:39 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:15 - 2014-09-06 11:39 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:15 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:28 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:16 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:15 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:02 - 2014-09-04 14:04 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 12:01 - 2014-09-04 12:01 - 00000000 ____D () C:\Users\Martin\AppData\Local\{CFA86953-C6E2-4126-9006-076AEFBABE0F}
2014-09-04 11:57 - 2014-09-04 13:00 - 24868352 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.avi
2014-09-03 13:34 - 2014-09-04 14:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:40 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:30 - 2014-09-03 11:43 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 11:30 - 2013-08-23 13:36 - 00721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2014-09-03 09:03 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:57 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 14:57 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 14:57 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-29 21:05 - 2014-09-04 13:00 - 03705161 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.gcs
2014-08-29 18:09 - 2014-08-29 18:57 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 14:01 - 2014-08-25 14:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 14:01 - 00001072 _____ () C:\Users\Martin\Desktop\GoPro Studio.lnk
2014-08-25 14:00 - 2014-08-26 15:28 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 14:00 - 2014-08-25 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 13:59 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 13:58 - 2014-09-08 20:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-08-25 13:58 - 2014-09-03 07:49 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-08-25 13:58 - 2014-09-02 14:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-08-25 13:58 - 2014-08-29 17:44 - 00000000 ____D () C:\Users\Martin\.android
2014-08-25 13:58 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\GoPro
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:57 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:48 - 2014-08-25 13:49 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:48 - 2014-08-25 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:47 - 2014-08-25 13:49 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-22 18:26 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-22 18:26 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-22 18:26 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-22 18:26 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-22 18:26 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-22 18:26 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 21:56 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-12 21:56 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-12 21:56 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-12 21:56 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-12 21:56 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-12 19:40 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-12 19:39 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-12 19:39 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-12 19:39 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-12 19:39 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-12 19:39 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-12 19:39 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-12 19:39 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-12 19:39 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-12 19:39 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-12 19:39 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-12 19:39 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-12 19:39 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-12 19:39 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-12 19:39 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-12 19:39 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-12 19:39 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-12 19:39 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-12 19:39 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-12 19:39 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-12 19:39 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-12 19:39 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-12 19:39 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-12 19:39 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-12 19:39 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-12 19:39 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-12 19:39 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-12 19:39 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-12 19:36 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-12 19:36 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-12 19:34 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-12 19:34 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-08 20:55 - 2014-09-08 19:54 - 00033523 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-08 20:55 - 2014-09-08 19:53 - 00000000 ____D () C:\FRST
2014-09-08 20:55 - 2014-09-06 19:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-08 20:55 - 2012-09-21 12:26 - 00000000 ____D () C:\Users\Martin\Documents\Youcam
2014-09-08 20:53 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-08 20:53 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-09-08 20:53 - 2014-02-25 21:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\Deployment
2014-09-08 20:52 - 2012-09-21 12:17 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-08 20:51 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-08 20:51 - 2009-07-14 06:51 - 00187783 _____ () C:\Windows\setupact.log
2014-09-08 20:45 - 2014-09-08 19:53 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-08 20:26 - 2012-09-21 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-08 20:10 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-08 20:10 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-08 19:57 - 2014-09-08 19:56 - 00059740 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 19:55 - 2012-09-21 12:15 - 02038832 _____ () C:\Windows\WindowsUpdate.log
2014-09-08 19:52 - 2014-09-08 19:52 - 02105344 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-08 19:21 - 2014-09-08 19:21 - 00144760 _____ () C:\Users\Martin\Downloads\Flash_Player_Pro_Setup.exe
2014-09-08 19:04 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-08 17:48 - 2013-01-18 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 23:05 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:52 - 2013-10-16 21:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-06 21:36 - 2014-09-06 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:34 - 2014-09-06 21:33 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:34 - 2014-01-18 18:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:29 - 2014-09-06 21:28 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 20:30 - 2010-11-21 05:47 - 00605834 _____ () C:\Windows\PFRO.log
2014-09-06 20:10 - 2011-11-07 18:01 - 00000000 ____D () C:\Windows\sl
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:52 - 2014-01-03 21:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-06 18:47 - 2014-09-06 18:44 - 00000000 ____D () C:\AdwCleaner
2014-09-06 11:39 - 2014-09-06 11:15 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:39 - 2014-09-06 11:15 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:20 - 2011-11-04 03:51 - 04695830 _____ () C:\Windows\system32\perfh007.dat
2014-09-06 11:20 - 2011-11-04 03:51 - 01459642 _____ () C:\Windows\system32\perfc007.dat
2014-09-06 11:20 - 2009-07-14 07:13 - 00006456 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-04 14:21 - 2012-12-07 22:20 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-09-04 14:21 - 2011-11-10 20:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-04 14:18 - 2014-09-03 13:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-04 14:04 - 2014-09-04 12:02 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 13:00 - 2014-09-04 11:57 - 24868352 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.avi
2014-09-04 13:00 - 2014-08-29 21:05 - 03705161 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.gcs
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:28 - 2014-09-04 12:22 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:22 - 2014-09-04 12:16 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:22 - 2014-09-04 12:15 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:22 - 2014-09-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-04 12:01 - 2014-09-04 12:01 - 00000000 ____D () C:\Users\Martin\AppData\Local\{CFA86953-C6E2-4126-9006-076AEFBABE0F}
2014-09-04 12:00 - 2012-09-24 17:49 - 00000000 ____D () C:\Users\Martin\AppData\Local\Windows Live
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:43 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 11:40 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:38 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin\AppData\Local\VirtualStore
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-03 11:00 - 2012-09-21 13:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 07:49 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-09-03 07:48 - 2009-07-14 06:45 - 05133048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:53 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-01 22:16 - 2011-11-15 13:46 - 00000000 ____D () C:\ProgramData\Temp
2014-08-29 18:57 - 2014-08-29 18:09 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-29 17:44 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\.android
2014-08-26 15:28 - 2014-08-25 14:00 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 16:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-25 14:02 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 14:01 - 00001072 _____ () C:\Users\Martin\Desktop\GoPro Studio.lnk
2014-08-25 14:01 - 2014-08-25 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2014-08-25 14:01 - 2014-08-25 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 14:00 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\GoPro
2014-08-25 14:00 - 2013-05-21 12:46 - 00000000 ____D () C:\Program Files\DIFX
2014-08-25 14:00 - 2011-11-10 21:22 - 00039084 _____ () C:\Windows\DPINST.LOG
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:58 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:58 - 2012-09-21 12:24 - 00144888 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-25 13:58 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:57 - 2012-12-07 22:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-08-25 13:49 - 2014-08-25 13:48 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:49 - 2014-08-25 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:49 - 2014-08-25 13:47 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 04:07 - 2014-09-02 14:57 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 14:57 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 14:57 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-14 07:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 22:07 - 2012-10-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-12 22:02 - 2013-07-24 22:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-12 22:00 - 2011-11-03 22:34 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-12 21:56 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-12 20:06 - 2012-09-21 14:19 - 00000000 ____D () C:\Users\Martin\Feuerwehr

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\avgnt.exe
C:\Users\Martin\AppData\Local\Temp\DevSetup32.dll
C:\Users\Martin\AppData\Local\Temp\DevSetup64.dll
C:\Users\Martin\AppData\Local\Temp\DriverInstall32.exe
C:\Users\Martin\AppData\Local\Temp\DriverInstall64.exe
C:\Users\Martin\AppData\Local\Temp\exthelper.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\KillProcess.exe
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SimBundD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 13:21

==================== End Of Log ============================
--- --- ---

martin26 08.09.2014 20:06
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-09-2014 01
Ran by Martin at 2014-09-08 20:56:46
Running from C:\Users\Martin\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DataManager (HKLM-x32\...\3DataManager) (Version: 3.5 - 3DataManager)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS2 (HKLM-x32\...\Adobe InDesign CS2 - {7F4C8163-F259-49A0-A018-2857A90578BC}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.8.1217.36096 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096 - Alcor Micro Corp.) Hidden
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
AMI VR-pulse OS Switcher (HKLM\...\{EC1369CF-15BD-4FAF-BA84-65E4788C682E}) (Version: 1.1 - American Megatrends Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{5891DC21-E941-487E-ADD8-B56FFFBF5036}) (Version: 3.5.91.388 - ArcSoft)
Ashampoo Burning Studio (HKLM-x32\...\Ashampoo Burning Studio_is1) (Version: 10.0.10 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander (HKLM-x32\...\Ashampoo Photo Commander_is1) (Version: 9.2.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer (HKLM-x32\...\Ashampoo Photo Optimizer_is1) (Version: 4.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Snap (HKLM-x32\...\Ashampoo Snap_is1) (Version: 4.3.0 - Ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)
Bonjour (HKLM\...\{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}) (Version: 2.0.4.0 - Apple Inc.)
Cinergy T Stick RC V86.001.1129.2011 (HKLM-x32\...\Cinergy T Stick RC) (Version: 86.001.1129.2011 - )
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.14.50 - Conexant)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}) (Version: 15.2.0.686 - Corel Corporation)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Common (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - DE (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - EN (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - ES (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version:  - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - FR (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (x32 Version: 15.3 -  Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.2.0.686 - Corel Corporation)
CorelDRAW Essentials X5 (x32 Version: 15.3 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1508_36229 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.1.2414 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.1.2414 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.1327 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 9.0.0.3419a - CyberLink Corp.)
CyberLink PowerDirector (Version: 9.0.0.3419a - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.3510.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.3503 - CyberLink Corp.)
CyberLink PowerProducer (x32 Version: 5.0.2.3503 - CyberLink Corp.) Hidden
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.3320 - CyberLink Corp.)
CyberLink WaveEditor (x32 Version: 1.0.1.3320 - CyberLink Corp.) Hidden
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1108 - CyberLink Corp.)
CyberLink YouCam 5 (x32 Version: 5.0.1108 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.80 - DivX, LLC)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.4 - Dolby Laboratories Inc)
Druckerdeinstallation für EPSON SX218 Series (HKLM\...\EPSON SX218 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Firefighters 2014 (HKLM-x32\...\Steam App 291910) (Version:  - VIS - Visual Imagination Software)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.0.128 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin TOPO Österreich v2 (HKLM-x32\...\{BCE6CBA2-AB50-48C7-8309-B0CC1E2D8926}) (Version: 2.01.0.0 - Garmin Ltd or its subsidiaries)
Garmin Trip and Waypoint Manager v5 (HKLM-x32\...\{414A373B-59DF-4102-94CA-9FE9A74CBDDA}) (Version: 5.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GoPro Studio 2.0.1 (HKLM-x32\...\GoPro Studio) (Version: 2.0.1 - WoodmanLabs Inc. d.b.a. GoPro)
HOFER Bestellsoftware 4.9.6 (HKLM-x32\...\HOFER Bestellsoftware) (Version: 4.9.6 - ORWO Net)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.13.0.003 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.24.5 - HTC)
Intel PROSet Wireless (Version:  - ) Hidden
Intel PROSet Wireless (x32 Version:  - ) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2538 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.2.0.0587 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{295AEB79-B53A-4F1B-860F-7800BB7E3681}) (Version: 14.2.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{E1B934BB-6AFA-429F-98E4-76F9CBC72BF6}) (Version: 2.2.14.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
IT9130 Driver v12.3.14.1 (HKLM-x32\...\IT9130 DriverInstaller_12.3.14.1) (Version:  - )
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MEDION GoPal Assistant (HKLM-x32\...\{B9D45A76-61DF-4387-B0FE-CA165D582B57}) (Version: 6.3.6.13143 - MEDION)
Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.3216 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
Medion USB Driver (HKLM-x32\...\{BE8229D3-224E-4413-801F-7B4DD94561B4}) (Version: 2.1.0 - Medion)
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7943 - Memeo Inc.)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Mathematics (64-Bit) (HKLM\...\{E57B7E0A-8BE5-42E2-BE60-C07ED680A063}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Moveslink for Movestick Mini (HKLM-x32\...\{4D036ACA-DFDF-41B2-A680-E0D736F3E947}) (Version: 1.2.40 - Suunto)
Moveslink2 (HKCU\...\ad9740b1426036fe) (Version: 1.2.9.4693 - Suunto)
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
myMugle (HKLM-x32\...\myMugle3.0.0.0) (Version: 3.0.0.0 - Computer Business Solutions)
NVIDIA Control Panel 285.64 (Version: 285.64 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 285.64 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 285.64 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.46.235 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.5.20 (Version: 1.5.20 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.5.20 - NVIDIA Corporation) Hidden
PCSUITE SHREDDER (HKLM-x32\...\PCSUITE_SHREDDER_PRO_is1) (Version:  - Markement GmbH)
PDF-XChange Editor (HKLM-x32\...\{e6c66f24-ae75-4cce-8afc-8ed58d732f6a}) (Version: 3.0.307.0 - Tracker Software Products (Canada) Ltd.)
PDF-XChange Editor (Version: 3.0.307.0 - Tracker Software Products (Canada) Ltd.) Hidden
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0045 - Pegatron Corporation)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
POIbase 1.061 (HKLM-x32\...\POIbase_is1) (Version:  - POIbase)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden
RESCUE 2013 (HKCU\...\RESCUE 2013) (Version: 1.00.00.00 - rondomedia GmbH)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.18.0 - SAMSUNG Electronics Co., Ltd.)
SearchMe Toolbar v9.7 (HKLM-x32\...\{A65F4631-06AE-4504-9F5B-3E75ABAE7D5D}) (Version: 9.7 - Spigot, Inc.) <==== ATTENTION
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spelling Dictionaries Support For Adobe Reader X (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-A00000000004}) (Version: 10.0.0 - Adobe Systems Incorporated)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.27.1 - Synaptics Incorporated)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - )
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.0.0.0 - Azureus Software, Inc.)
watchmi (HKLM-x32\...\{409DC300-28AF-468F-9624-1F3309701881}) (Version: 2.7.0 - Axel Springer Digital TV Guide GmbH)
Wildlife Park 3 v1.0 (HKLM-x32\...\Wildlife Park 3_is1) (Version:  - bitComposer Games)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)
Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Mobile Device Center Driver Update (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
XnView 2.00 (HKLM-x32\...\XnView_is1) (Version: 2.00 - Gougelet Pierre-e)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3936720586-788128334-3552643003-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3936720586-788128334-3552643003-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3936720586-788128334-3552643003-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3936720586-788128334-3552643003-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

06-09-2014 09:40:25 Windows Update
06-09-2014 19:33:06 Installed Java 7 Update 67

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0CEEA3BB-D09D-486B-9AF0-9F7EBF7A037D} - System32\Tasks\{A0D3FD72-5AE6-46E7-BDCB-3EBDB1973AEF} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/abandoninstall?source=lightinstaller&amp;page=tsMain
Task: {292FDF63-6F82-48F3-8E18-D4203BD6D4DB} - System32\Tasks\{AF3F476F-4D10-4D0E-8E24-D64CC02EB0FF} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {38B65B40-4DBB-43AB-9052-88EF3EA3B22D} - System32\Tasks\{9A502582-408E-499C-82DC-0DD5C2E4B6D5} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {3D50A7C6-3A68-4616-A27F-96FA3B1CD322} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5A284F49-3FB9-4A66-8E63-BDD3E541ED6E} - System32\Tasks\{1707E5C2-D6A1-4F8D-8CF6-78D147DA2BEF} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {64E154F2-FFFF-41FE-B698-14B94F39CDE8} - System32\Tasks\{AB3035CE-711D-4DAF-8026-E4794AFC7835} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {69614322-F8C6-4A95-8583-DBADF513EFB3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {76572880-1118-455E-9A57-92D60A0C562B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-21] (Google Inc.)
Task: {7EBC7677-BF1E-46F9-ABA5-B30B98C639E0} - System32\Tasks\{42C9C398-50D6-4BDE-B91D-8BF3A995E9D7} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {82F3CCD0-B050-48DC-80EA-28CBB98E9B12} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {8D8B918E-A200-43D1-B4AE-AA862D1AD1FD} - System32\Tasks\{EDF6340A-7255-43F7-801A-BA0692705059} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {90D69BC9-9DED-45DE-B211-B77510A1272C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-21] (Google Inc.)
Task: {9B4FC69F-583C-4382-B460-AB1402C2AA78} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {CE392A25-F54C-474E-B32F-7D2BE95CE99B} - System32\Tasks\{E1C366C2-8B26-4631-922E-304AFC4A65B3} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {DA2784C4-CEB6-429C-8D54-B7DCA25ED4F7} - System32\Tasks\{CB6C34A8-B4EB-4012-A3C0-CEB6C5D0381D} => C:\Program Files (x86)\Electronic Arts\Die Sims 3\Game\Bin\Sims3Launcher.exe
Task: {FC90F8A6-92EE-4209-B657-B7332898FFDB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-09-16 03:46 - 2011-09-16 03:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-11-10 22:15 - 2009-12-19 01:40 - 00104968 _____ () C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
2011-11-10 22:15 - 2011-10-14 00:38 - 00156672 _____ () C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
2011-11-10 22:15 - 2011-10-14 21:06 - 00818688 _____ () C:\Program Files (x86)\PHotkey\PHotkey.exe
2011-11-10 22:15 - 2010-01-13 03:36 - 00117256 _____ () C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
2011-11-10 22:15 - 2010-01-13 03:36 - 00121864 _____ () C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
2014-08-08 19:51 - 2014-08-08 19:51 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2011-11-10 01:32 - 2011-09-26 00:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-09-16 03:46 - 2011-09-16 03:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-09-02 17:15 - 2014-07-22 22:46 - 03356480 _____ () C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe
2013-12-09 19:55 - 2012-07-10 15:38 - 00506864 ____N () C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
2011-10-07 11:23 - 2011-10-07 11:23 - 01070592 _____ () C:\Program Files (x86)\watchmi\TvdTray.exe
2011-10-07 11:23 - 2011-10-07 11:23 - 00004608 _____ () C:\Program Files (x86)\watchmi\de\TvdTray.resources.dll
2012-09-21 12:17 - 2012-09-21 12:17 - 00058880 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\2.7.0.12__f722db7bec59a14b\Tvd.Remote.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2011-11-17 13:17 - 2010-08-19 18:43 - 00386344 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2011-10-07 11:23 - 2011-10-07 11:23 - 00070144 _____ () C:\Program Files (x86)\watchmi\TvdService.exe
2012-09-21 12:17 - 2012-09-21 12:17 - 00032768 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Tools\2.7.0.12__f722db7bec59a14b\Tvd.Tools.dll
2012-09-21 12:17 - 2012-09-21 12:17 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\FingerPrint\1.0.0.0__a62e68e935d72fa6\FingerPrint.dll
2012-09-21 12:17 - 2012-09-21 12:17 - 00079360 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Reporting\2.7.0.12__f722db7bec59a14b\Tvd.Reporting.dll
2012-09-21 12:17 - 2012-09-21 12:17 - 00152576 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Aprico\2.7.0.12__f722db7bec59a14b\Tvd.Aprico.dll
2013-12-09 19:55 - 2012-07-05 06:03 - 00343024 ____N () C:\Program Files (x86)\3DataManager\WTGService.exe
2011-11-10 22:15 - 2010-12-28 00:14 - 00776200 _____ () C:\Program Files (x86)\PHotkey\PVDesktop.exe
2011-11-10 22:15 - 2011-04-13 00:32 - 00483336 _____ () C:\Program Files (x86)\PHotkey\PVDAgent.exe
2011-11-10 22:15 - 2011-10-24 23:59 - 03420160 _____ () C:\Program Files (x86)\PHotkey\POSD.exe
2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2011-11-10 22:15 - 2009-12-19 01:36 - 00973432 _____ () C:\Program Files (x86)\PHotkey\acAuth.dll
2011-11-10 22:15 - 2009-12-19 01:41 - 00129544 _____ () C:\Program Files (x86)\PHotkey\GFNEX.dll
2014-08-08 19:50 - 2014-08-08 19:50 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-08-08 19:51 - 2014-08-08 19:51 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-08-08 19:51 - 2014-08-08 19:51 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-08-08 19:51 - 2014-08-08 19:51 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-08-08 19:51 - 2014-08-08 19:51 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-08-08 19:52 - 2014-08-08 19:52 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-08-08 19:53 - 2014-08-08 19:53 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2014-09-06 11:15 - 2014-09-06 11:15 - 07248384 _____ () C:\Users\Martin\AppData\Local\Apps\2.0\GY9MXZB6.8P0\K193595Z.LQP\move..tion_3ccae3cb2a36e2f5_0001.0002_a975bf06beb701f6\BLLWrapper.DLL
2009-12-08 15:54 - 2009-12-08 15:54 - 02011648 _____ () C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\QtCore4.dll
2009-09-29 13:43 - 2009-09-29 13:43 - 07462912 _____ () C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\QtGui4.dll
2009-09-29 13:31 - 2009-09-29 13:31 - 00337408 _____ () C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\QtXml4.dll
2009-09-29 13:32 - 2009-09-29 13:32 - 00877056 _____ () C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\QtNetwork4.dll
2014-07-02 12:50 - 2007-04-19 09:33 - 00035584 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\uPiApi.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-09-03 11:31 - 2014-08-05 10:22 - 01489408 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-09-03 11:31 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-09-06 21:32 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-09-06 21:32 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-09-06 21:32 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-09-06 21:32 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-09-06 21:32 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-08-16 19:27 - 2014-08-16 19:27 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\e1dca04e43d05aff13c672a916b3e8ef\IsdiInterop.ni.dll
2011-11-10 20:17 - 2011-05-20 20:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-09-03 09:03 - 2014-09-03 09:04 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-20 01:42 - 2014-04-20 01:42 - 00468672 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-04-20 01:42 - 2014-04-20 01:42 - 00699072 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
2014-04-20 01:42 - 2014-04-20 01:42 - 00347328 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
2014-07-09 18:49 - 2014-07-09 18:49 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:054203E4

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/08/2014 08:52:49 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 08:39:27 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 08:30:34 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 08:24:55 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 07:50:26 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 07:27:47 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 07:05:29 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 01:44:34 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
  bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
  bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
  --- Ende der internen Ausnahmestapelüberwachung ---
  bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
  bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
  bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
  bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.  bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
  bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
  bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/08/2014 01:38:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6831752

Error: (09/08/2014 01:38:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6831752


System errors:
=============
Error: (09/08/2014 08:55:19 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (09/08/2014 08:53:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/08/2014 08:53:25 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (09/08/2014 08:52:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/08/2014 08:52:31 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMScheduler erreicht.

Error: (09/08/2014 08:49:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (09/08/2014 08:49:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (09/08/2014 08:49:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (09/08/2014 08:49:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (09/08/2014 08:49:43 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}


Microsoft Office Sessions:
=========================
Error: (11/27/2012 08:31:40 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6652.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5139 seconds with 1140 seconds of active time.  This session ended with a crash.

Error: (10/22/2012 06:16:41 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-02-26 15:31:53.134
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:53.102
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:50.965
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:50.934
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:48.586
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:48.570
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:46.464
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:46.433
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:44.343
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-26 15:31:44.312
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz
Percentage of memory in use: 61%
Total physical RAM: 4007.05 MB
Available physical RAM: 1549.75 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 4974.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:160.33 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:27.97 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=404.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================

schrauber 09.09.2014 20:31
Adware & Co. deinstallieren



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

martin26 10.09.2014 13:22
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 10.09.2014
Suchlauf-Zeit: 13:24:33
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.10.04
Rootkit Datenbank: v2014.08.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Martin

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 363909
Verstrichene Zeit: 22 Min, 12 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.OptimunInstaller, C:\$RECYCLE.BIN\S-1-5-21-3936720586-788128334-3552643003-1002\$RRH2PEU.exe, In Quarantäne, [df1d876497e40c2a4a931f2a9d63be42],

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
# AdwCleaner v3.309 - Bericht erstellt am 10/09/2014 um 14:11:10
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Martin - MARTIN-PC
# Gestartet von : C:\Users\Martin\Downloads\adwcleaner_3.309.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v32.0 (x86 de)

[ Datei : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\prefs.js ]


-\\ Google Chrome v37.0.2062.103

[ Datei : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9303 octets] - [06/09/2014 18:44:32]
AdwCleaner[R1].txt - [1180 octets] - [10/09/2014 11:52:12]
AdwCleaner[R2].txt - [1214 octets] - [10/09/2014 14:08:26]
AdwCleaner[R3].txt - [1275 octets] - [10/09/2014 14:10:14]
AdwCleaner[S0].txt - [8853 octets] - [06/09/2014 18:46:56]
AdwCleaner[S1].txt - [1196 octets] - [10/09/2014 11:53:41]
AdwCleaner[S2].txt - [1196 octets] - [10/09/2014 14:11:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1256 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Martin on 10.09.2014 at 12:42:50,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.09.2014 at 13:20:37,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014
Ran by Martin (administrator) on MARTIN-PC on 10-09-2014 14:18:36
Running from C:\Users\Martin\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe
(GoPro) C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Suunto) C:\Users\Martin\AppData\Local\Apps\2.0\GY9MXZB6.8P0\K193595Z.LQP\move..tion_3ccae3cb2a36e2f5_0001.0002_a975bf06beb701f6\Moveslink2.exe
(Suunto Oy) C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\Moveslink.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Moveslink2] => C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Amazon Music] => C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe [3356480 2014-07-22] ()
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: F - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {07aaa07a-6282-11e3-9759-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {08712ecf-3adf-11e3-a9f4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {188766fe-0d44-11e2-8df2-001e101fe5e1} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {5f38a2f7-03d5-11e2-9e60-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351b89-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351ba7-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bb0-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bc2-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6adb667d-0c03-11e4-9268-4c8093367f49} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef87fa-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8810-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8865-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8876-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8897-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88a6-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88d9-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {c39fcf8c-7903-11e3-9734-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9313b-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9314a-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f02-0be1-11e2-a991-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f62-0be1-11e2-a991-001e101f859f} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290304-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229031d-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290334-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290358-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290363-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229037a-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290392-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229039d-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903a7-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903bc-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903ca-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903e8-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903eb-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {e7e517d9-7244-11e3-bc8b-4c8093367f49} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {f2d0801c-0d88-11e2-b423-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CineForm Status.lnk
ShortcutTarget: CineForm Status.lnk -> C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink for Movestick Mini.lnk
ShortcutTarget: Moveslink for Movestick Mini.lnk -> C:\Windows\Installer\{4D036ACA-DFDF-41B2-A680-E0D736F3E947}\_22A9010B636AF7A61D8E03.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKCU - {A81A4E1D-058D-469D-A8E0-4871449ECA9A} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\Parameters: [DhcpNameServer] 195.202.138.3 195.202.128.3 62.40.128.2
Tcpip\..\Interfaces\{4ABF2963-5275-4EAA-8261-86889517C5B8}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{56052A40-478E-4C77-B083-882DC7023837}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{E09F3F10-7BA9-4DCB-9D6A-9C97DA0E3135}: [NameServer] 213.94.78.16 213.94.78.17

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default
FF Homepage: https://www.google.at/?gws_rd=ssl
FF Keyword.URL: https://at.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=888596&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @ei.UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISB.dll (Utility Chest)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-20]
FF Extension: Website Counselor - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{cc6cc772-f121-49e0-b1f0-c26583cb0c5e} [2014-09-08]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Modul zum Sperren von gefährlichen Webseiten - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址過濾 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Sicherer Zahlungsverkehr - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-09-06]

Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2012-11-08]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-04-06]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2012-11-08]
CHR Extension: (Anti-Banner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2012-11-08]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-30] (Adobe Systems) [File not signed]
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-05-19] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1335360 2011-05-19] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-05-19] (Intel Corporation) [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] () [File not signed]
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-12-09] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2014-07-02] (ITE                      )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140352 2014-09-06] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792128 2014-09-06] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-10] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:20 - 2014-09-10 13:21 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-10 10:34 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:02 - 2014-09-09 14:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 19:56 - 2014-09-08 20:57 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 19:54 - 2014-09-10 14:18 - 00033737 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-08 19:53 - 2014-09-10 14:18 - 00000000 ____D () C:\FRST
2014-09-08 19:53 - 2014-09-08 20:45 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-08 19:52 - 2014-09-10 14:18 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 21:34 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-06 21:34 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-06 21:33 - 2014-09-06 21:34 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:32 - 2014-09-06 23:05 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:32 - 2014-09-06 21:36 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-06 21:28 - 2014-09-06 21:29 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 19:15 - 2014-09-10 13:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 19:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 19:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-06 18:44 - 2014-09-10 14:11 - 00000000 ____D () C:\AdwCleaner
2014-09-06 11:16 - 2014-09-10 14:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-06 11:16 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-09-06 11:15 - 2014-09-06 11:39 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:15 - 2014-09-06 11:39 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:15 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:28 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:16 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:15 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:02 - 2014-09-04 14:04 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 11:57 - 2014-09-04 13:00 - 24868352 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.avi
2014-09-03 13:34 - 2014-09-04 14:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:40 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:30 - 2014-09-03 11:43 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 09:03 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:57 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 14:57 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 14:57 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-29 21:05 - 2014-09-04 13:00 - 03705161 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.gcs
2014-08-29 18:09 - 2014-08-29 18:57 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 14:01 - 2014-08-25 14:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 14:01 - 00001072 _____ () C:\Users\Martin\Desktop\GoPro Studio.lnk
2014-08-25 14:00 - 2014-08-26 15:28 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 14:00 - 2014-08-25 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 13:59 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 13:58 - 2014-09-10 14:13 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-08-25 13:58 - 2014-09-03 07:49 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-08-25 13:58 - 2014-09-02 14:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-08-25 13:58 - 2014-08-29 17:44 - 00000000 ____D () C:\Users\Martin\.android
2014-08-25 13:58 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\GoPro
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:57 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:48 - 2014-08-25 13:49 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:48 - 2014-08-25 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:47 - 2014-08-25 13:49 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-22 18:26 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-22 18:26 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-22 18:26 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-22 18:26 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-22 18:26 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-22 18:26 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 21:56 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-12 21:56 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-12 21:56 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-12 21:56 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-12 21:56 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-12 19:40 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-12 19:39 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-12 19:39 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-12 19:39 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-12 19:39 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-12 19:39 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-12 19:39 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-12 19:39 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-12 19:39 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-12 19:39 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-12 19:39 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-12 19:39 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-12 19:39 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-12 19:39 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-12 19:39 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-12 19:39 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-12 19:39 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-12 19:39 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-12 19:39 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-12 19:39 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-12 19:39 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-12 19:39 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-12 19:39 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-12 19:39 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-12 19:39 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-12 19:39 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-12 19:39 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-12 19:39 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-12 19:36 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-12 19:36 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-12 19:34 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-12 19:34 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 14:20 - 2014-09-08 19:54 - 00033737 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:18 - 2014-09-08 19:53 - 00000000 ____D () C:\FRST
2014-09-10 14:18 - 2014-09-08 19:52 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-10 14:15 - 2012-09-21 12:26 - 00000000 ____D () C:\Users\Martin\Documents\Youcam
2014-09-10 14:14 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-10 14:14 - 2014-02-25 21:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\Deployment
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 14:13 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-09-10 14:13 - 2012-09-21 12:17 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-10 14:12 - 2010-11-21 05:47 - 00607204 _____ () C:\Windows\PFRO.log
2014-09-10 14:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-10 14:12 - 2009-07-14 06:51 - 00189687 _____ () C:\Windows\setupact.log
2014-09-10 14:11 - 2014-09-06 18:44 - 00000000 ____D () C:\AdwCleaner
2014-09-10 14:11 - 2012-09-21 12:15 - 01302098 _____ () C:\Windows\WindowsUpdate.log
2014-09-10 14:11 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-10 14:11 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:57 - 2014-09-06 19:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-10 13:48 - 2013-01-18 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-10 13:25 - 2012-09-21 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-10 13:21 - 2014-09-10 13:20 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:50 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-09 23:16 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:13 - 2014-09-09 14:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 20:57 - 2014-09-08 19:56 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 20:45 - 2014-09-08 19:53 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 23:05 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:52 - 2013-10-16 21:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-06 21:36 - 2014-09-06 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:34 - 2014-09-06 21:33 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:34 - 2014-01-18 18:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:29 - 2014-09-06 21:28 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 20:10 - 2011-11-07 18:01 - 00000000 ____D () C:\Windows\sl
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:52 - 2014-01-03 21:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-06 11:39 - 2014-09-06 11:15 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:39 - 2014-09-06 11:15 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:20 - 2011-11-04 03:51 - 04695830 _____ () C:\Windows\system32\perfh007.dat
2014-09-06 11:20 - 2011-11-04 03:51 - 01459642 _____ () C:\Windows\system32\perfc007.dat
2014-09-06 11:20 - 2009-07-14 07:13 - 00006456 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-04 14:21 - 2012-12-07 22:20 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-09-04 14:21 - 2011-11-10 20:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-04 14:18 - 2014-09-03 13:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-04 14:04 - 2014-09-04 12:02 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 13:00 - 2014-09-04 11:57 - 24868352 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.avi
2014-09-04 13:00 - 2014-08-29 21:05 - 03705161 _____ () C:\Users\Martin\Desktop\Kroatien Film 2014.gcs
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:28 - 2014-09-04 12:22 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:22 - 2014-09-04 12:16 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:22 - 2014-09-04 12:15 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:22 - 2014-09-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-04 12:00 - 2012-09-24 17:49 - 00000000 ____D () C:\Users\Martin\AppData\Local\Windows Live
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:43 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 11:40 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:38 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin\AppData\Local\VirtualStore
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-03 11:00 - 2012-09-21 13:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 07:49 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-09-03 07:48 - 2009-07-14 06:45 - 05133048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:53 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-01 22:16 - 2011-11-15 13:46 - 00000000 ____D () C:\ProgramData\Temp
2014-08-29 18:57 - 2014-08-29 18:09 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-29 17:44 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\.android
2014-08-26 15:28 - 2014-08-25 14:00 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 16:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-25 14:02 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 14:01 - 00001072 _____ () C:\Users\Martin\Desktop\GoPro Studio.lnk
2014-08-25 14:01 - 2014-08-25 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2014-08-25 14:01 - 2014-08-25 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 14:00 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\GoPro
2014-08-25 14:00 - 2013-05-21 12:46 - 00000000 ____D () C:\Program Files\DIFX
2014-08-25 14:00 - 2011-11-10 21:22 - 00039084 _____ () C:\Windows\DPINST.LOG
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:58 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:58 - 2012-09-21 12:24 - 00144888 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:57 - 2012-12-07 22:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-08-25 13:49 - 2014-08-25 13:48 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:49 - 2014-08-25 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:49 - 2014-08-25 13:47 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 04:07 - 2014-09-02 14:57 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 14:57 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 14:57 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-14 07:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 22:07 - 2012-10-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-12 22:02 - 2013-07-24 22:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-12 22:00 - 2011-11-03 22:34 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-12 21:56 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-12 20:06 - 2012-09-21 14:19 - 00000000 ____D () C:\Users\Martin\Feuerwehr

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\avgnt.exe
C:\Users\Martin\AppData\Local\Temp\DevSetup32.dll
C:\Users\Martin\AppData\Local\Temp\DevSetup64.dll
C:\Users\Martin\AppData\Local\Temp\DriverInstall32.exe
C:\Users\Martin\AppData\Local\Temp\DriverInstall64.exe
C:\Users\Martin\AppData\Local\Temp\exthelper.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\KillProcess.exe
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SimBundD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 13:21

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 11.09.2014 11:02

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

martin26 11.09.2014 22:45
Code:
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2f180fe0bffbf54798f6a7b0a80d3a83
# engine=20112
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-09-11 09:23:08
# local_time=2014-09-11 11:23:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 131873 162100438 0 0
# scanned=279673
# found=15
# cleaned=0
# scan_time=9451
sh=76B34FD0F1D0A5CD299421BA2D19B1E4346B3560 ft=1 fh=23ca8dcb86a96df7 vn="Variante von Win32/Toolbar.Widgi.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Application Updater\ApplicationUpdater.exe.vir"
sh=432593852D39839246F5432DB6D969E4C8494D17 ft=1 fh=e28f072648164ad8 vn="Variante von Win64/Toolbar.Widgi.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe.vir"
sh=817C7014920F215F19E9ADF1417D17B1B9313C51 ft=1 fh=5bbb74b04bfb6858 vn="Variante von Win32/Toolbar.Widgi.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\wth187.dll.vir"
sh=7EC2C589CD43E34385C47077221C0C89694D436B ft=1 fh=785479b259d92815 vn="Variante von Win64/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\wthx187.dll.vir"
sh=6F5CE71E806A24CC9967C8E874908195DC2087FE ft=1 fh=0c61afa8ad479962 vn="Variante von Win32/Toolbar.Widgi.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchMe Toolbar\FF\components\searchmeToolbarFF.dll.vir"
sh=E936D5073A84FB814237AE000680D980ECB774C3 ft=1 fh=7fc582ff58967ccd vn="Variante von Win64/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchMe Toolbar\IE\9.7\searchmeToolbarIE64.dll.vir"
sh=591D803F416762DC3FCB74ACE296C9C859BF0FB6 ft=1 fh=c0e489eae949fd96 vn="Variante von Win32/Complitly.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Martin\AppData\Roaming\Complitly\Complitly.dll.vir"
sh=909E34E71D18C58DA18FAA7F66B75CB4A812AB46 ft=1 fh=a1bc21d630dbbecc vn="Variante von Win32/PredictAd.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Martin\AppData\Roaming\Complitly\KeepMeUpdated.exe.vir"
sh=EE0BF41C133868CC0F660CB353251456D3616656 ft=1 fh=49e75c26beab8628 vn="Variante von Win64/Complitly.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Martin\AppData\Roaming\Complitly\64\Complitly64.dll.vir"
sh=909E34E71D18C58DA18FAA7F66B75CB4A812AB46 ft=1 fh=a1bc21d630dbbecc vn="Variante von Win32/PredictAd.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Martin\AppData\Roaming\Complitly\64\KeepMeUpdated.exe.vir"
sh=92848CD2DE52E2F6C88540484E470BA66283F15D ft=1 fh=09be573173d0b555 vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\49EIPlug.dll"
sh=4EBD162321CC87F2135DF784F0B0F22D317EA81E ft=1 fh=e044dc573dc92d51 vn="Variante von Win32/Toolbar.MyWebSearch.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\49EZSETP.dll"
sh=E4DE943602500DA7802A214B4CF75A354DB409D1 ft=1 fh=ff78088587933893 vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISb.dll"
sh=6360E9C039062FF34138F3C82F1AC07530EAA592 ft=1 fh=7e6da5295e7db893 vn="Variante von Win32/Toolbar.MyWebSearch.V evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Martin\AppData\LocalLow\UtilityChest_49EI\Installr\Cache\002397FB.exe"
sh=A9F6A3299D8E5A8B0F8F18915521C8B3E7C9F864 ft=1 fh=a874d3fc82897e2d vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="D:\TOOLS\Medion MediaPack\medion_mediapack_2_ext.exe"
Code:
Results of screen317's Security Check version 0.99.87 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Kaspersky Internet Security 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
 Spybot - Search & Destroy
 Java 7 Update 67 
 Adobe Flash Player 15.0.0.152 
 Adobe Reader XI 
 Mozilla Firefox (32.0)
 Google Chrome 36.0.1985.143 
 Google Chrome 37.0.2062.103 
````````Process Check: objlist.exe by Laurent```````` 
 Spybot Teatimer.exe is disabled!
 Malwarebytes Anti-Malware mbamscheduler.exe 
 Kaspersky Lab Kaspersky Internet Security 15.0.0 avp.exe 
 Kaspersky Lab Kaspersky Internet Security 15.0.0 avpui.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014
Ran by Martin (administrator) on MARTIN-PC on 11-09-2014 23:44:22
Running from C:\Users\Martin\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Suunto) C:\Users\Martin\AppData\Local\Apps\2.0\GY9MXZB6.8P0\K193595Z.LQP\move..tion_3ccae3cb2a36e2f5_0001.0002_a975bf06beb701f6\Moveslink2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Suunto Oy) C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\Moveslink.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\3DataManager\3DataManager.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Moveslink2] => C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Amazon Music] => C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe [3356480 2014-07-22] ()
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: F - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {07aaa07a-6282-11e3-9759-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {08712ecf-3adf-11e3-a9f4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {188766fe-0d44-11e2-8df2-001e101fe5e1} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {5f38a2f7-03d5-11e2-9e60-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351b89-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351ba7-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bb0-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bc2-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6adb667d-0c03-11e4-9268-4c8093367f49} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef87fa-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8810-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8865-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8876-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8897-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88a6-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88d9-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {c39fcf8c-7903-11e3-9734-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9313b-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9314a-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f02-0be1-11e2-a991-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f62-0be1-11e2-a991-001e101f859f} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290304-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229031d-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290334-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290358-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290363-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229037a-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290392-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229039d-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903a7-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903bc-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903ca-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903e8-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903eb-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {e7e517d9-7244-11e3-bc8b-4c8093367f49} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {f2d0801c-0d88-11e2-b423-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink for Movestick Mini.lnk
ShortcutTarget: Moveslink for Movestick Mini.lnk -> C:\Windows\Installer\{4D036ACA-DFDF-41B2-A680-E0D736F3E947}\_22A9010B636AF7A61D8E03.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKCU - {A81A4E1D-058D-469D-A8E0-4871449ECA9A} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\..\Interfaces\{4ABF2963-5275-4EAA-8261-86889517C5B8}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{56052A40-478E-4C77-B083-882DC7023837}: [NameServer] 213.94.78.16 213.94.78.17
Tcpip\..\Interfaces\{E09F3F10-7BA9-4DCB-9D6A-9C97DA0E3135}: [NameServer] 213.94.78.16 213.94.78.17

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default
FF Homepage: https://www.google.at/?gws_rd=ssl
FF Keyword.URL: https://at.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=888596&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @ei.UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISB.dll (Utility Chest)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-20]
FF Extension: Website Counselor - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\hm3lh5ja.default\Extensions\{cc6cc772-f121-49e0-b1f0-c26583cb0c5e} [2014-09-08]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Modul zum Sperren von gefährlichen Webseiten - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址過濾 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Sicherer Zahlungsverkehr - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-09-06]

Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2012-11-08]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-04-06]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2012-11-08]
CHR Extension: (Anti-Banner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2012-11-08]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-30] (Adobe Systems) [File not signed]
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-05-19] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1335360 2011-05-19] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-05-19] (Intel Corporation) [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] () [File not signed]
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-12-09] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2014-07-02] (ITE                      )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140352 2014-09-06] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792128 2014-09-06] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-11] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-11 23:24 - 2014-09-11 23:24 - 00002248 _____ () C:\Users\Martin\Desktop\eset.txt
2014-09-11 20:44 - 2014-09-11 20:44 - 00001007 _____ () C:\Users\Martin\Desktop\checkup.txt
2014-09-11 19:29 - 2014-09-11 19:29 - 00001097 _____ () C:\Users\Martin\Desktop\SecurityCheck - Verknüpfung.lnk
2014-09-11 19:28 - 2014-09-11 19:29 - 00854417 _____ () C:\Users\Martin\Downloads\SecurityCheck.exe
2014-09-11 18:06 - 2014-09-11 18:06 - 00001288 _____ () C:\Users\Martin\Desktop\esetsmartinstaller_deu - Verknüpfung.lnk
2014-09-11 18:04 - 2014-09-11 18:05 - 02347384 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_deu.exe
2014-09-10 14:21 - 2014-09-10 14:21 - 00074151 _____ () C:\Users\Martin\Downloads\FRST neu.txt
2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:20 - 2014-09-10 13:21 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-10 10:34 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:02 - 2014-09-09 14:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 19:56 - 2014-09-08 20:57 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 19:54 - 2014-09-11 23:44 - 00033746 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-08 19:53 - 2014-09-11 23:44 - 00000000 ____D () C:\FRST
2014-09-08 19:53 - 2014-09-08 20:45 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-08 19:52 - 2014-09-10 14:18 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 21:34 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-06 21:34 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-06 21:33 - 2014-09-06 21:34 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:32 - 2014-09-06 23:05 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:32 - 2014-09-06 21:36 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-06 21:28 - 2014-09-06 21:29 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 19:15 - 2014-09-11 22:54 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 19:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 19:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-06 18:44 - 2014-09-10 14:11 - 00000000 ____D () C:\AdwCleaner
2014-09-06 11:16 - 2014-09-11 23:30 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-06 11:16 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-09-06 11:15 - 2014-09-06 11:39 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:15 - 2014-09-06 11:39 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:15 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:28 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:16 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:15 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:02 - 2014-09-04 14:04 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-03 13:34 - 2014-09-04 14:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:40 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:30 - 2014-09-03 11:43 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 09:03 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:57 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 14:57 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 14:57 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-29 18:09 - 2014-08-29 18:57 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 14:01 - 2014-08-25 14:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:00 - 2014-08-26 15:28 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 13:59 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 13:58 - 2014-09-11 23:30 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-08-25 13:58 - 2014-09-03 07:49 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-08-25 13:58 - 2014-09-02 14:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-08-25 13:58 - 2014-08-29 17:44 - 00000000 ____D () C:\Users\Martin\.android
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:57 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:48 - 2014-08-25 13:49 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:48 - 2014-08-25 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:47 - 2014-08-25 13:49 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-22 18:26 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-22 18:26 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-22 18:26 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-22 18:26 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-22 18:26 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-22 18:26 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 21:56 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-12 21:56 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-12 21:56 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-12 21:56 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-12 21:56 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-12 21:56 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-12 19:40 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-12 19:40 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-12 19:40 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-12 19:39 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-12 19:39 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-12 19:39 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-12 19:39 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-12 19:39 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-12 19:39 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-12 19:39 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-12 19:39 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-12 19:39 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-12 19:39 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-12 19:39 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-12 19:39 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-12 19:39 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-12 19:39 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-12 19:39 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-12 19:39 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-12 19:39 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-12 19:39 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-12 19:39 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-12 19:39 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-12 19:39 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-12 19:39 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-12 19:39 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-12 19:39 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-12 19:39 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-12 19:39 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-12 19:39 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-12 19:39 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-12 19:39 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-12 19:39 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-12 19:39 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-12 19:39 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-12 19:39 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-12 19:39 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-12 19:39 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-12 19:39 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-12 19:39 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-12 19:39 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-12 19:39 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-12 19:39 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-12 19:39 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-12 19:39 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-12 19:39 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-12 19:39 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-12 19:39 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-12 19:39 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-12 19:36 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-12 19:36 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-12 19:34 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-12 19:34 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-11 23:45 - 2014-09-08 19:54 - 00033746 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-11 23:44 - 2014-09-08 19:53 - 00000000 ____D () C:\FRST
2014-09-11 23:38 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-11 23:38 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-11 23:34 - 2012-09-21 12:15 - 01491126 _____ () C:\Windows\WindowsUpdate.log
2014-09-11 23:32 - 2012-09-21 12:26 - 00000000 ____D () C:\Users\Martin\Documents\Youcam
2014-09-11 23:30 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-11 23:30 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-09-11 23:30 - 2014-02-25 21:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\Deployment
2014-09-11 23:29 - 2012-09-21 12:17 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-11 23:28 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-11 23:28 - 2009-07-14 06:51 - 00190023 _____ () C:\Windows\setupact.log
2014-09-11 23:25 - 2012-09-21 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-11 23:24 - 2014-09-11 23:24 - 00002248 _____ () C:\Users\Martin\Desktop\eset.txt
2014-09-11 22:54 - 2014-09-06 19:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-11 22:48 - 2013-01-18 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-11 20:44 - 2014-09-11 20:44 - 00001007 _____ () C:\Users\Martin\Desktop\checkup.txt
2014-09-11 19:29 - 2014-09-11 19:29 - 00001097 _____ () C:\Users\Martin\Desktop\SecurityCheck - Verknüpfung.lnk
2014-09-11 19:29 - 2014-09-11 19:28 - 00854417 _____ () C:\Users\Martin\Downloads\SecurityCheck.exe
2014-09-11 18:06 - 2014-09-11 18:06 - 00001288 _____ () C:\Users\Martin\Desktop\esetsmartinstaller_deu - Verknüpfung.lnk
2014-09-11 18:05 - 2014-09-11 18:04 - 02347384 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_deu.exe
2014-09-10 20:48 - 2013-01-18 11:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 20:48 - 2013-01-18 11:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 20:48 - 2011-11-07 18:44 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 14:21 - 2014-09-10 14:21 - 00074151 _____ () C:\Users\Martin\Downloads\FRST neu.txt
2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:18 - 2014-09-08 19:52 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 14:12 - 2010-11-21 05:47 - 00607204 _____ () C:\Windows\PFRO.log
2014-09-10 14:11 - 2014-09-06 18:44 - 00000000 ____D () C:\AdwCleaner
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:21 - 2014-09-10 13:20 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:50 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-09 23:16 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:13 - 2014-09-09 14:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 20:57 - 2014-09-08 19:56 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 20:45 - 2014-09-08 19:53 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 23:05 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:52 - 2013-10-16 21:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-06 21:36 - 2014-09-06 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:34 - 2014-09-06 21:33 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:34 - 2014-01-18 18:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:29 - 2014-09-06 21:28 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 20:10 - 2011-11-07 18:01 - 00000000 ____D () C:\Windows\sl
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:52 - 2014-01-03 21:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-06 11:39 - 2014-09-06 11:15 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:39 - 2014-09-06 11:15 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:20 - 2011-11-04 03:51 - 04695830 _____ () C:\Windows\system32\perfh007.dat
2014-09-06 11:20 - 2011-11-04 03:51 - 01459642 _____ () C:\Windows\system32\perfc007.dat
2014-09-06 11:20 - 2009-07-14 07:13 - 00006456 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-04 14:21 - 2012-12-07 22:20 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-09-04 14:21 - 2011-11-10 20:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-04 14:18 - 2014-09-03 13:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-04 14:04 - 2014-09-04 12:02 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:28 - 2014-09-04 12:22 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:22 - 2014-09-04 12:16 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:22 - 2014-09-04 12:15 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:22 - 2014-09-03 09:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-04 12:00 - 2012-09-24 17:49 - 00000000 ____D () C:\Users\Martin\AppData\Local\Windows Live
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:43 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 11:40 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:38 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin\AppData\Local\VirtualStore
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:31 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-03 11:00 - 2012-09-21 13:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 07:49 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-09-03 07:48 - 2009-07-14 06:45 - 05133048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:53 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-01 22:16 - 2011-11-15 13:46 - 00000000 ____D () C:\ProgramData\Temp
2014-08-29 18:57 - 2014-08-29 18:09 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-29 17:44 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\.android
2014-08-26 15:28 - 2014-08-25 14:00 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 16:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-25 14:02 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 14:00 - 2013-05-21 12:46 - 00000000 ____D () C:\Program Files\DIFX
2014-08-25 14:00 - 2011-11-10 21:22 - 00039084 _____ () C:\Windows\DPINST.LOG
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:58 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:58 - 2012-09-21 12:24 - 00144888 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:57 - 2012-12-07 22:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-08-25 13:49 - 2014-08-25 13:48 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:49 - 2014-08-25 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:49 - 2014-08-25 13:47 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 04:07 - 2014-09-02 14:57 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 14:57 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 14:57 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun
2014-08-14 07:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 19:25 - 2014-08-13 19:25 - 00341848 _____ (DivX, LLC) C:\Windows\SysWOW64\DivXControlPanelApplet.cpl
2014-08-12 22:07 - 2012-10-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-12 22:02 - 2013-07-24 22:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-12 22:00 - 2011-11-03 22:34 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-12 21:56 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-12 20:06 - 2012-09-21 14:19 - 00000000 ____D () C:\Users\Martin\Feuerwehr

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\avgnt.exe
C:\Users\Martin\AppData\Local\Temp\DevSetup32.dll
C:\Users\Martin\AppData\Local\Temp\DevSetup64.dll
C:\Users\Martin\AppData\Local\Temp\DriverInstall32.exe
C:\Users\Martin\AppData\Local\Temp\DriverInstall64.exe
C:\Users\Martin\AppData\Local\Temp\exthelper.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\KillProcess.exe
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SimBundD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 13:21

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 12.09.2014 20:08
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Noch Probleme?

martin26 12.09.2014 20:28
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-09-2014
Ran by Martin at 2014-09-12 21:21:31 Run:1
Running from C:\Users\Martin\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
       
*****************

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====
Kaspersky zeigt mir nichts mehr an, das einzige was noch ist, ist das sich der laptop ziemlich oft aufhängt, und wenn ich im internet bin und ich etwas anklicke öffnet sich ein fenster das dann von malwarebyts geblockt wird.
Danke dir für deine Hilfe!

schrauber 13.09.2014 18:32
In welchem Browser?

martin26 14.09.2014 11:19
Im Firefox

schrauber 14.09.2014 15:18
Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen


Frisches FRST log bitte.

martin26 14.09.2014 16:18

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014
Ran by Martin (administrator) on MARTIN-PC on 14-09-2014 17:12:18
Running from C:\Users\Martin\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Suunto) C:\Users\Martin\AppData\Local\Apps\2.0\GY9MXZB6.8P0\K193595Z.LQP\move..tion_3ccae3cb2a36e2f5_0001.0002_a975bf06beb701f6\Moveslink2.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Suunto Oy) C:\Program Files (x86)\Suunto\Moveslink for Movestick Mini\Moveslink.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\wmi64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Moveslink2] => C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto\Moveslink2.appref-ms -auto
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Amazon Music] => C:\Users\Martin\AppData\Local\Amazon Music\Amazon Music Helper.exe [3356480 2014-07-22] ()
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: F - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {07aaa07a-6282-11e3-9759-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {08712ecf-3adf-11e3-a9f4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {188766fe-0d44-11e2-8df2-001e101fe5e1} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {5f38a2f7-03d5-11e2-9e60-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351b89-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351ba7-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bb0-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {61351bc2-6b8c-11e2-b466-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6adb667d-0c03-11e4-9268-4c8093367f49} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef87fa-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8810-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8865-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8876-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef8897-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88a6-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {6aef88d9-6d20-11e2-99a9-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {c39fcf8c-7903-11e3-9734-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9313b-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ccc9314a-60f8-11e3-97c4-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f02-0be1-11e2-a991-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {ce866f62-0be1-11e2-a991-001e101f859f} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290304-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229031d-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290334-6b8d-11e2-98d6-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290358-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290363-6b8d-11e2-98d6-4c8093367f49} - F:\AutoRun.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229037a-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d2290392-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d229039d-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903a7-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903bc-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903ca-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903e8-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {d22903eb-6b8d-11e2-98d6-001e101f63cf} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {e7e517d9-7244-11e3-bc8b-4c8093367f49} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3936720586-788128334-3552643003-1002\...\MountPoints2: {f2d0801c-0d88-11e2-b423-4c8093367f49} - F:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink for Movestick Mini.lnk
ShortcutTarget: Moveslink for Movestick Mini.lnk -> C:\Windows\Installer\{4D036ACA-DFDF-41B2-A680-E0D736F3E947}\_22A9010B636AF7A61D8E03.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKCU - DefaultScope {A81A4E1D-058D-469D-A8E0-4871449ECA9A} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
SearchScopes: HKCU - {A81A4E1D-058D-469D-A8E0-4871449ECA9A} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL No File
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
Tcpip\Parameters: [DhcpNameServer] 195.202.138.3 195.202.128.3 62.40.128.2
Tcpip\..\Interfaces\{4ABF2963-5275-4EAA-8261-86889517C5B8}: [NameServer] 213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{56052A40-478E-4C77-B083-882DC7023837}: [NameServer] 213.94.78.16 213.94.78.17
Tcpip\..\Interfaces\{E09F3F10-7BA9-4DCB-9D6A-9C97DA0E3135}: [NameServer] 213.94.78.16 213.94.78.17

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\56lx8tud.default-1410707122313
FF Homepage: https://www.google.at/?gws_rd=ssl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @ei.UtilityChest_49.com/Plugin -> C:\Program Files (x86)\UtilityChest_49EI\Installr\1.bin\NP49EISB.dll (Utility Chest)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Martin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Modul zum Sperren von gefährlichen Webseiten - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址過濾 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-09-06]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Sicherer Zahlungsverkehr - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-09-06]

Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2012-11-08]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-04-06]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2012-11-08]
CHR Extension: (Anti-Banner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2012-11-08]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-30] (Adobe Systems) [File not signed]
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-05-19] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1335360 2011-05-19] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-05-19] (Intel Corporation) [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] () [File not signed]
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed]
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-12-09] (Huawei Technologies Co., Ltd.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2014-07-02] (ITE                      )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140352 2014-09-06] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792128 2014-09-06] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-14 17:02 - 2014-09-14 17:05 - 00000000 ____D () C:\Users\Martin\Desktop\Alte Firefox-Daten
2014-09-14 17:00 - 2014-09-14 17:00 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-14 17:00 - 2014-09-14 17:00 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-14 17:00 - 2014-09-14 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-14 17:00 - 2014-09-14 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-14 16:59 - 2014-09-14 16:59 - 00244376 _____ () C:\Users\Martin\Downloads\Firefox Setup Stub 32.0.1.exe
2014-09-12 00:53 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 00:53 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 00:53 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 00:53 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 00:53 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 00:53 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 00:53 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 00:53 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 00:53 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 00:53 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 00:53 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 00:53 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 00:53 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 00:53 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 00:53 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 00:53 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 00:53 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 00:53 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 00:53 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 00:53 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 00:53 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 00:53 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 00:53 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 00:53 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 00:53 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 00:53 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 00:53 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 00:53 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 00:53 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 00:53 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 00:53 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 00:53 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 00:53 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 00:53 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 00:53 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 00:53 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 00:53 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 00:53 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 00:53 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 00:53 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 00:53 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 00:53 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 00:53 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 00:53 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 00:53 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 00:53 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 00:53 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 00:53 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 00:53 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 00:53 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 00:53 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 00:53 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 00:53 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 00:53 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 00:53 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 00:53 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-12 00:45 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-12 00:45 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-11 23:24 - 2014-09-11 23:24 - 00002248 _____ () C:\Users\Martin\Desktop\eset.txt
2014-09-11 20:44 - 2014-09-11 20:44 - 00001007 _____ () C:\Users\Martin\Desktop\checkup.txt
2014-09-11 19:29 - 2014-09-11 19:29 - 00001097 _____ () C:\Users\Martin\Desktop\SecurityCheck - Verknüpfung.lnk
2014-09-11 19:28 - 2014-09-11 19:29 - 00854417 _____ () C:\Users\Martin\Downloads\SecurityCheck.exe
2014-09-11 18:15 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 18:15 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-11 18:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 18:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-11 18:12 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 18:12 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 18:12 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 18:12 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 18:12 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-11 18:12 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-11 18:12 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-11 18:06 - 2014-09-11 18:06 - 00001288 _____ () C:\Users\Martin\Desktop\esetsmartinstaller_deu - Verknüpfung.lnk
2014-09-11 18:04 - 2014-09-11 18:05 - 02347384 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_deu.exe
2014-09-10 14:21 - 2014-09-10 14:21 - 00074151 _____ () C:\Users\Martin\Downloads\FRST neu.txt
2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:20 - 2014-09-10 13:21 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-10 10:34 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:02 - 2014-09-09 14:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 19:56 - 2014-09-08 20:57 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 19:54 - 2014-09-14 17:12 - 00032673 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-08 19:53 - 2014-09-14 17:12 - 00000000 ____D () C:\FRST
2014-09-08 19:53 - 2014-09-08 20:45 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-08 19:52 - 2014-09-10 14:18 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 21:34 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-09-06 21:34 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-09-06 21:34 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-09-06 21:33 - 2014-09-06 21:34 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:32 - 2014-09-06 23:05 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:32 - 2014-09-06 21:36 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:32 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-06 21:28 - 2014-09-06 21:29 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 19:15 - 2014-09-14 17:04 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 19:15 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 19:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-06 18:44 - 2014-09-10 14:11 - 00000000 ____D () C:\AdwCleaner
2014-09-06 11:16 - 2014-09-14 17:10 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-06 11:16 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-09-06 11:15 - 2014-09-06 11:39 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:15 - 2014-09-06 11:39 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:15 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:28 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:16 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:15 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:02 - 2014-09-04 14:04 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-03 13:34 - 2014-09-04 14:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-12 21:24 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-09-03 11:31 - 2014-09-03 11:40 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-03 11:30 - 2014-09-04 10:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:30 - 2014-09-03 11:43 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:57 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 14:57 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 14:57 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-08-29 18:09 - 2014-08-29 18:57 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 14:01 - 2014-08-25 14:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:00 - 2014-08-26 15:28 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 13:59 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 13:58 - 2014-09-14 17:10 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-08-25 13:58 - 2014-09-03 07:49 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-08-25 13:58 - 2014-09-02 14:53 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-08-25 13:58 - 2014-08-29 17:44 - 00000000 ____D () C:\Users\Martin\.android
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:57 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:48 - 2014-08-25 13:49 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:48 - 2014-08-25 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:47 - 2014-08-25 13:49 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-22 18:26 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-22 18:26 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-22 18:26 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-22 18:26 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-22 18:26 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-22 18:26 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-22 18:26 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-22 18:26 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-14 17:13 - 2014-09-08 19:54 - 00032673 _____ () C:\Users\Martin\Downloads\FRST.txt
2014-09-14 17:12 - 2014-09-08 19:53 - 00000000 ____D () C:\FRST
2014-09-14 17:12 - 2012-09-21 12:26 - 00000000 ____D () C:\Users\Martin\Documents\Youcam
2014-09-14 17:11 - 2014-02-25 21:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\Deployment
2014-09-14 17:10 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-14 17:10 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\HTC MediaHub
2014-09-14 17:09 - 2012-09-21 12:17 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-14 17:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-14 17:08 - 2010-11-21 05:47 - 00608634 _____ () C:\Windows\PFRO.log
2014-09-14 17:08 - 2009-07-14 06:51 - 00190527 _____ () C:\Windows\setupact.log
2014-09-14 17:05 - 2014-09-14 17:02 - 00000000 ____D () C:\Users\Martin\Desktop\Alte Firefox-Daten
2014-09-14 17:04 - 2014-09-06 19:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-14 17:00 - 2014-09-14 17:00 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-14 17:00 - 2014-09-14 17:00 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-14 17:00 - 2014-09-14 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-14 17:00 - 2014-09-14 17:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-14 16:59 - 2014-09-14 16:59 - 00244376 _____ () C:\Users\Martin\Downloads\Firefox Setup Stub 32.0.1.exe
2014-09-14 16:59 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-14 16:59 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-14 16:55 - 2012-09-21 12:15 - 01356671 _____ () C:\Windows\WindowsUpdate.log
2014-09-13 21:25 - 2012-09-21 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-13 20:48 - 2013-01-18 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-12 21:24 - 2014-09-03 11:31 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-09-12 21:21 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-12 16:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-12 14:55 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin
2014-09-12 01:00 - 2012-10-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-12 00:49 - 2013-07-24 22:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 00:46 - 2011-11-03 22:34 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-12 00:45 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-11 23:24 - 2014-09-11 23:24 - 00002248 _____ () C:\Users\Martin\Desktop\eset.txt
2014-09-11 20:44 - 2014-09-11 20:44 - 00001007 _____ () C:\Users\Martin\Desktop\checkup.txt
2014-09-11 19:29 - 2014-09-11 19:29 - 00001097 _____ () C:\Users\Martin\Desktop\SecurityCheck - Verknüpfung.lnk
2014-09-11 19:29 - 2014-09-11 19:28 - 00854417 _____ () C:\Users\Martin\Downloads\SecurityCheck.exe
2014-09-11 18:06 - 2014-09-11 18:06 - 00001288 _____ () C:\Users\Martin\Desktop\esetsmartinstaller_deu - Verknüpfung.lnk
2014-09-11 18:05 - 2014-09-11 18:04 - 02347384 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_deu.exe
2014-09-10 20:48 - 2013-01-18 11:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 20:48 - 2013-01-18 11:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 20:48 - 2011-11-07 18:44 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 14:21 - 2014-09-10 14:21 - 00074151 _____ () C:\Users\Martin\Downloads\FRST neu.txt
2014-09-10 14:18 - 2014-09-10 14:18 - 00000000 ____D () C:\Users\Martin\Downloads\FRST-OlderVersion
2014-09-10 14:18 - 2014-09-08 19:52 - 02105856 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-09-10 14:13 - 2014-09-10 14:13 - 00001336 _____ () C:\Users\Martin\Desktop\AdwCleaner[S2].txt
2014-09-10 14:11 - 2014-09-06 18:44 - 00000000 ____D () C:\AdwCleaner
2014-09-10 13:57 - 2014-09-10 13:57 - 00001287 _____ () C:\Users\Martin\Desktop\mbam.txt
2014-09-10 13:21 - 2014-09-10 13:20 - 00000626 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-09-10 12:19 - 2014-09-10 12:19 - 00001196 _____ () C:\Users\Martin\Desktop\AdwCleaner[S1].txt
2014-09-10 11:52 - 2014-09-10 11:52 - 01370483 _____ () C:\Users\Martin\Downloads\adwcleaner_3.309.exe
2014-09-10 11:45 - 2014-09-10 11:45 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT(1).exe
2014-09-10 10:35 - 2014-09-10 10:35 - 00000000 ____D () C:\Users\Martin\AppData\Local\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 10619688 _____ (VS Revo Group ) C:\Users\Martin\Downloads\RevoUninProSetup.exe
2014-09-10 10:34 - 2014-09-10 10:34 - 00001081 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-09-10 10:34 - 2014-09-10 10:34 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-09 23:16 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-09 21:48 - 2014-09-09 21:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup95.exe
2014-09-09 21:48 - 2014-09-09 21:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-09 14:13 - 2014-09-09 14:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys
2014-09-08 21:03 - 2014-09-08 21:03 - 00070533 _____ () C:\Users\Martin\Downloads\FRST(1).txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00070533 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-09-08 20:58 - 2014-09-08 20:58 - 00067193 _____ () C:\Users\Martin\Desktop\Addition.txt
2014-09-08 20:57 - 2014-09-08 19:56 - 00067193 _____ () C:\Users\Martin\Downloads\Addition.txt
2014-09-08 20:45 - 2014-09-08 19:53 - 00001459 _____ () C:\Users\Martin\Desktop\FRST64 - Verknüpfung.lnk
2014-09-07 19:31 - 2014-09-07 19:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3FB47E59.sys
2014-09-06 23:05 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 21:52 - 2013-10-16 21:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-06 21:36 - 2014-09-06 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 21:34 - 2014-09-06 21:33 - 00004257 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-09-06 21:34 - 2014-01-18 18:15 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-06 21:32 - 2014-09-06 21:32 - 00001355 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00001343 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-09-06 21:32 - 2014-09-06 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 21:29 - 2014-09-06 21:28 - 01101648 _____ () C:\Users\Martin\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 01016261 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-09-06 21:08 - 2014-09-06 21:08 - 00000000 ____D () C:\Windows\ERUNT
2014-09-06 20:10 - 2011-11-07 18:01 - 00000000 ____D () C:\Windows\sl
2014-09-06 19:15 - 2014-09-06 19:15 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-06 19:15 - 2014-09-06 19:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-06 19:14 - 2014-09-06 19:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-06 18:52 - 2014-01-03 21:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-06 11:39 - 2014-09-06 11:15 - 00792128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-09-06 11:39 - 2014-09-06 11:15 - 00140352 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-09-06 11:20 - 2011-11-04 03:51 - 04695830 _____ () C:\Windows\system32\perfh007.dat
2014-09-06 11:20 - 2011-11-04 03:51 - 01459642 _____ () C:\Windows\system32\perfc007.dat
2014-09-06 11:20 - 2009-07-14 07:13 - 00006456 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 11:16 - 2014-09-06 11:16 - 00001160 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-09-06 11:16 - 2014-09-06 11:16 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-05 04:10 - 2014-09-11 18:12 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-11 18:12 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 14:21 - 2012-12-07 22:20 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-04 14:21 - 2012-12-07 22:17 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-09-04 14:21 - 2011-11-10 20:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-04 14:18 - 2014-09-03 13:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-09-04 14:04 - 2014-09-04 12:02 - 00004608 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-04 12:50 - 2014-09-04 12:50 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\WebExtend
2014-09-04 12:28 - 2014-09-04 12:22 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DivX
2014-09-04 12:25 - 2014-09-04 12:25 - 00000000 ____D () C:\Users\Martin\AppData\Local\DDMSettings
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-09-04 12:22 - 2014-09-04 12:22 - 00000000 ____D () C:\Program Files\DivX
2014-09-04 12:22 - 2014-09-04 12:16 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-09-04 12:22 - 2014-09-04 12:15 - 00000000 ____D () C:\ProgramData\DivX
2014-09-04 12:00 - 2012-09-24 17:49 - 00000000 ____D () C:\Users\Martin\AppData\Local\Windows Live
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare
2014-09-04 10:30 - 2014-09-03 11:30 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-09-03 11:43 - 2014-09-03 11:30 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-09-03 11:40 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\Documents\Wondershare Video Converter Ultimate
2014-09-03 11:38 - 2012-09-21 12:23 - 00000000 ____D () C:\Users\Martin\AppData\Local\VirtualStore
2014-09-03 11:32 - 2014-09-03 11:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wondershare Video Converter Ultimate
2014-09-03 11:31 - 2014-09-03 11:31 - 00000000 ____D () C:\Users\Martin\AppData\Local\Wondershare
2014-09-03 11:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-03 07:49 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer
2014-09-03 07:48 - 2009-07-14 06:45 - 05133048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-02 17:15 - 2014-09-02 17:15 - 00001134 _____ () C:\Users\Martin\Desktop\Amazon Music.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-02 14:53 - 2014-09-02 14:53 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 14:53 - 2014-08-25 13:58 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-02 14:52 - 2014-09-02 14:52 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple
2014-09-02 14:52 - 2014-09-02 14:52 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-09-01 22:16 - 2011-11-15 13:46 - 00000000 ____D () C:\ProgramData\Temp
2014-08-29 18:57 - 2014-08-29 18:09 - 00000000 ____D () C:\Users\Martin\Desktop\Neuer Ordner
2014-08-29 17:44 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\.android
2014-08-26 15:28 - 2014-08-25 14:00 - 00000000 ____D () C:\Users\Public\CineForm
2014-08-25 19:53 - 2014-08-25 19:53 - 00000000 ____D () C:\Users\Martin\AppData\Local\GoPro
2014-08-25 14:02 - 2014-08-25 14:01 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\GoPro
2014-08-25 14:01 - 2014-08-25 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HTC
2014-08-25 14:00 - 2014-08-25 14:00 - 00000000 ____D () C:\Program Files (x86)\CineForm
2014-08-25 14:00 - 2013-05-21 12:46 - 00000000 ____D () C:\Program Files\DIFX
2014-08-25 14:00 - 2011-11-10 21:22 - 00039084 _____ () C:\Windows\DPINST.LOG
2014-08-25 13:58 - 2014-08-25 13:58 - 00001995 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\Documents\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Computer
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
2014-08-25 13:58 - 2014-08-25 13:58 - 00000000 ____D () C:\ProgramData\HTC
2014-08-25 13:58 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-08-25 13:58 - 2012-09-21 12:24 - 00144888 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-25 13:57 - 2014-08-25 13:57 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-08-25 13:57 - 2012-12-07 22:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-08-25 13:49 - 2014-08-25 13:48 - 00001974 _____ () C:\Users\Public\Desktop\MEDION GoPal Assistant.lnk
2014-08-25 13:49 - 2014-08-25 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION GoPal Assistant
2014-08-25 13:49 - 2014-08-25 13:47 - 00000000 ____D () C:\Program Files (x86)\MEDION GoPal Assistant
2014-08-25 06:53 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 04:07 - 2014-09-02 14:57 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 14:57 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 14:57 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-19 20:05 - 2014-09-12 00:53 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-12 00:53 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 01:01 - 2014-09-12 00:53 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-12 00:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-12 00:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-12 00:53 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-12 00:53 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-12 00:53 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-12 00:53 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-12 00:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-12 00:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-12 00:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-12 00:53 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-12 00:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-12 00:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-12 00:53 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-12 00:53 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-12 00:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-12 00:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 23:57 - 2014-09-12 00:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 23:56 - 2014-09-12 00:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 23:51 - 2014-09-12 00:53 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 23:46 - 2014-09-12 00:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 23:45 - 2014-09-12 00:53 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 23:45 - 2014-09-12 00:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 23:44 - 2014-09-12 00:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 23:44 - 2014-09-12 00:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 23:42 - 2014-09-12 00:53 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 23:40 - 2014-09-12 00:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 23:39 - 2014-09-12 00:53 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 23:39 - 2014-09-12 00:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 23:39 - 2014-09-12 00:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 23:38 - 2014-09-12 00:53 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 23:37 - 2014-09-12 00:53 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 23:36 - 2014-09-12 00:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 23:35 - 2014-09-12 00:53 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 23:27 - 2014-09-12 00:53 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 23:25 - 2014-09-12 00:53 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 23:25 - 2014-09-12 00:53 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 23:23 - 2014-09-12 00:53 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 23:23 - 2014-09-12 00:53 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 23:22 - 2014-09-12 00:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 23:19 - 2014-09-12 00:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 23:17 - 2014-09-12 00:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 23:17 - 2014-09-12 00:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 23:16 - 2014-09-12 00:53 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 23:15 - 2014-09-12 00:53 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 23:15 - 2014-09-12 00:53 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 23:09 - 2014-09-12 00:53 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 23:08 - 2014-09-12 00:53 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 23:07 - 2014-09-12 00:53 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 22:55 - 2014-09-12 00:53 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 22:46 - 2014-09-12 00:53 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 22:38 - 2014-09-12 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 22:38 - 2014-09-12 00:53 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 22:36 - 2014-09-12 00:53 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-18 18:37 - 2014-08-18 18:37 - 00000000 ____D () C:\Windows\Sun

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\avgnt.exe
C:\Users\Martin\AppData\Local\Temp\DevSetup32.dll
C:\Users\Martin\AppData\Local\Temp\DevSetup64.dll
C:\Users\Martin\AppData\Local\Temp\DriverInstall32.exe
C:\Users\Martin\AppData\Local\Temp\DriverInstall64.exe
C:\Users\Martin\AppData\Local\Temp\exthelper.exe
C:\Users\Martin\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Martin\AppData\Local\Temp\KillProcess.exe
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\SimBundD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 13:21

==================== End Of Log ============================
--- --- ---

schrauber 14.09.2014 18:42
Noch Probleme?


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:13 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19