Trojaner-Board - Schädliches Programm Search Protector versehentlich installiert

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-02-2015

Ran by Admin (administrator) on ADMIN-PC on 25-02-2015 00:48:35

Running from C:\Users\Admin\Downloads

Loaded Profiles: Admin (Available profiles: Admin & DefaultAppPool)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Windows\System32\snmp.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe

(Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe

() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Nicolas Kruse) C:\Program Files (x86)\Nettalk6\Nettalk.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [HP LaserJet Professional CM1410 Series Fax] => C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2010-08-24] (Hewlett-Packard Company)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [ToolboxFX] => C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe [58936 2010-10-25] (Hewlett-Packard Company)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)

HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795672 2014-11-04] (CyberLink Corp.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\RunOnce: [EasyTuneVI] => C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-07-09] ()

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\MountPoints2: {556a2940-1341-11e4-8d12-74d4355f2902} - K:\wubi.exe

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk

ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()

FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKU\S-1-5-21-2923093104-4289724597-612471131-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Extension: Avira Browser Safety - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\abs@avira.com [2015-02-07]

FF Extension: Amazon-Icon - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\amazon-icon@giga.de [2015-02-23]

FF Extension: DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08]

FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-12]
 

Chrome: 

=======

CHR HomePage: Default -> 

CHR StartupUrls: Default -> "", "hxxp://google.de/", "hxxp://istart.webssearches.com/?type=hppp&ts=1402917236&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1402929263&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403001126&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403165571&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403182683&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403271853&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375"

CHR DefaultSearchKeyword: Default -> google

CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}

CHR DefaultSuggestURL: Default -> 

CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-24]

CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]

CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-24]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-24]

CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-24]

CHR Extension: (Vocalun) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceifdlgmnbopekcihhoohdnfpofnlbne [2015-02-24]

CHR Extension: (Adblock Plus) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-02-24]

CHR Extension: (Google Search) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-24]

CHR Extension: (Nisekoi) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\feajbjkmgkeiipookccieahdjohgbloo [2015-02-24]

CHR Extension: (Google Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-24]

CHR Extension: (AdBlock) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-24]

CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-24]

CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-24]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AdobeUpdateService; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe [710320 2015-01-07] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2015-01-08] (Perfect World Entertainment Inc)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-12-29] (EasyAntiCheat Ltd)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-10-09] (Freemake) [File not signed]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [145920 2010-10-25] (HP) [File not signed]

S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-15] ()

R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)

R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)

S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-09] (Microsoft Corporation)

S2 VIAKaraokeService; %SystemRoot%\system32\viakaraokesrv.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed]

S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14920 2013-03-07] () [File not signed]

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]

S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]

R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-02-24] ()

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-24] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()

R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [32456 2014-11-04] (CyberLink Corp.)

S3 AnyDVD; System32\Drivers\AnyDVD.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]

S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]

S3 VUSBSTOR; \SystemRoot\System32\Drivers\vusbstor.sys [X]

S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-25 00:48 - 2015-02-25 00:48 - 00023754 _____ () C:\Users\Admin\Downloads\FRST.txt

2015-02-25 00:48 - 2015-02-25 00:48 - 00000000 ____D () C:\FRST

2015-02-25 00:46 - 2015-02-25 00:46 - 02087424 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe

2015-02-25 00:40 - 2015-02-25 00:40 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (60).m3u

2015-02-25 00:36 - 2015-02-25 00:36 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (59).m3u

2015-02-24 22:13 - 2015-02-24 22:13 - 02126848 _____ () C:\Users\Admin\Downloads\adwcleaner_4.111 (1).exe

2015-02-24 21:35 - 2015-02-24 21:35 - 00000000 ____D () C:\Windows\pss

2015-02-24 21:08 - 2015-02-24 21:08 - 00573697 _____ () C:\Users\Admin\Downloads\Autoruns.zip

2015-02-24 21:08 - 2015-02-24 21:08 - 00000000 ____D () C:\Users\Admin\Downloads\Autoruns

2015-02-24 20:48 - 2015-02-24 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-02-24 20:45 - 2015-02-24 23:50 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-24 20:45 - 2015-02-24 22:47 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-24 20:45 - 2015-02-24 20:45 - 00880208 _____ (Google Inc.) C:\Users\Admin\Downloads\ChromeSetup.exe

2015-02-24 20:45 - 2015-02-24 20:45 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-24 20:45 - 2015-02-24 20:45 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-24 20:33 - 2015-02-24 20:33 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\TeamViewer

2015-02-24 19:36 - 2015-02-24 22:16 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-24 19:35 - 2015-02-24 19:35 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-02-24 19:35 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-24 19:35 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-24 19:35 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-02-24 19:33 - 2015-02-24 19:33 - 02126848 _____ () C:\Users\Admin\Downloads\adwcleaner_4.111.exe

2015-02-24 19:31 - 2015-02-24 19:31 - 01203488 _____ () C:\Users\Admin\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

2015-02-24 15:48 - 2015-02-24 15:48 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Publish Providers

2015-02-24 02:34 - 2015-02-24 02:34 - 00004180 _____ () C:\Users\Admin\Documents\Registrierungs-Backup.reg

2015-02-24 02:19 - 2015-02-24 02:19 - 00000016 _____ () C:\ProgramData\mntemp

2015-02-24 02:17 - 2015-02-24 02:17 - 01203488 _____ () C:\Users\Admin\Downloads\Total Uninstall - CHIP-Installer.exe

2015-02-24 01:30 - 2015-02-24 01:55 - 00002608 _____ () C:\Users\Admin\Vegas Pro registrieren.htm

2015-02-24 01:15 - 2015-02-24 01:16 - 18327667 _____ () C:\Users\Admin\Desktop\Miku_Hatsune_The_MMORPG_Addict_s_Anthem.mp4

2015-02-24 00:11 - 2015-02-24 01:27 - 00000000 ____D () C:\Users\Admin\AppData\Local\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\ProgramData\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\Program Files\Sony

2015-02-23 23:41 - 2015-02-24 15:47 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Sony

2015-02-23 23:17 - 2015-02-23 23:17 - 01203488 _____ () C:\Users\Admin\Downloads\Sony Vegas Pro - CHIP-Installer.exe

2015-02-23 23:15 - 2015-02-23 23:16 - 10033873 _____ (www.H264Encoder.com ) C:\Users\Admin\Downloads\h264encoder_setup.exe

2015-02-23 18:13 - 2015-02-23 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Abyssmedia

2015-02-23 18:13 - 2015-02-23 18:13 - 00000000 ____D () C:\Program Files (x86)\Abyssmedia

2015-02-23 18:12 - 2015-02-23 18:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Temp9fe011dc92dd9621139c96a06cabaccd

2015-02-23 17:54 - 2015-02-23 17:55 - 17445213 _____ () C:\Users\Admin\Desktop\Sword_Art_Online_II_-_Courage_German_FanCover_by_Chocolatex3Music.mp4

2015-02-22 22:38 - 2015-02-22 22:39 - 16826742 _____ () C:\Users\Admin\Downloads\47688 Glaze (WoodenToaster) ft. Brony Dance Party - Rainbow Factory.osz

2015-02-22 20:10 - 2015-02-24 15:34 - 00000000 ____D () C:\Program Files (x86)\HTTP Headers

2015-02-22 20:08 - 2015-02-22 20:12 - 00000000 ____D () C:\ProgramData\{3fdfb0fb-2771-dd64-3fdf-fb0fb277c3ec}

2015-02-22 19:52 - 2015-02-22 19:52 - 00761344 _____ (LIVE__SofT__ACTION) C:\Users\Admin\Downloads\Nicht bestätigt 597746.crdownload

2015-02-22 19:31 - 2015-02-22 19:31 - 00001059 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk

2015-02-22 19:30 - 2015-02-22 19:45 - 00000000 ____D () C:\Program Files\Adobe

2015-02-22 18:35 - 2015-02-22 18:35 - 03248982 _____ () C:\Users\Admin\Downloads\AP000C6K.rar

2015-02-22 18:07 - 2015-02-22 18:08 - 01473138 _____ () C:\Users\Admin\Downloads\Effects-AttilaProPack.Paint.NET.v1.exe

2015-02-22 17:54 - 2015-02-22 18:02 - 11027783 _____ () C:\Users\Admin\Downloads\Effects-MegaloPack.Paint.NET.v23.exe

2015-02-22 17:49 - 2015-02-22 17:49 - 00312651 _____ () C:\Users\Admin\Downloads\JPEG_2000.zip

2015-02-22 17:01 - 2015-02-22 17:04 - 64279615 _____ () C:\Users\Admin\Desktop\Comeback_stage_Eddy_Kim_-_My_Love_-_My_Love_Show_Music_core_20150124.mp4

2015-02-22 01:40 - 2015-02-22 01:40 - 00001319 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk

2015-02-22 01:40 - 2015-02-22 01:40 - 00001307 _____ () C:\Users\Public\Desktop\paint.net.lnk

2015-02-22 01:39 - 2015-02-22 17:52 - 00000000 ____D () C:\Program Files\paint.net

2015-02-22 01:39 - 2015-02-22 01:41 - 00000000 ____D () C:\Users\Admin\AppData\Local\paint.net

2015-02-22 01:30 - 2015-02-22 01:36 - 06528454 _____ () C:\Users\Admin\Downloads\paint.net.4.0.5.install.zip

2015-02-22 01:30 - 2015-02-22 01:30 - 05703020 _____ () C:\Users\Admin\Downloads\2.pdn

2015-02-22 01:28 - 2015-02-22 01:28 - 01203488 _____ () C:\Users\Admin\Downloads\Paint NET - CHIP-Installer.exe

2015-02-21 23:59 - 2015-02-21 23:59 - 00001125 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2015-02-21 23:57 - 2015-02-21 23:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3

2015-02-21 23:55 - 2015-02-21 23:56 - 17385800 _____ (Google Inc.) C:\Users\Admin\Downloads\picasa39-setup.exe

2015-02-21 21:50 - 2015-02-21 21:50 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (58).m3u

2015-02-21 19:33 - 2015-02-21 19:35 - 05409296 _____ () C:\Users\Admin\Desktop\10905786_434660763356688_1771128189_n.mp4

2015-02-21 15:58 - 2015-02-21 16:02 - 67812450 _____ () C:\Users\Admin\Desktop\Kagamine_Rin_Len_-_Pinko_Stick_Luv_English_subs_Romaji.mp4

2015-02-20 18:57 - 2015-02-20 19:01 - 66029139 _____ () C:\Users\Admin\Desktop\Park_Myung_Soo_Lizzy_-_Goodbye_PMS_MV_English_subs_Romanization_Hangul_HD.mp4

2015-02-20 18:37 - 2015-02-20 18:37 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (57).m3u

2015-02-20 17:41 - 2015-02-20 17:43 - 51271916 _____ () C:\Users\Admin\Desktop\MV_HALO_-_SURPRISE.mp4

2015-02-20 17:29 - 2015-02-20 17:34 - 61405524 _____ () C:\Users\Admin\Desktop\Soyu_Giriboy_ft._Kihyun_-_Arm_Pillow_MV_English_subs_Romanization_Hangul_HD.mp4

2015-02-20 11:29 - 2015-02-20 11:29 - 00000000 ___RD () C:\Users\Admin\Creative Cloud Files

2015-02-19 21:28 - 2015-02-19 21:28 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (56).m3u

2015-02-17 23:52 - 2015-02-17 23:52 - 00119573 _____ () C:\Users\Admin\Documents\Chat.htm

2015-02-17 19:15 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-02-17 19:15 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-02-17 19:15 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-02-17 19:15 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll

2015-02-15 18:07 - 2015-02-15 18:07 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (55).m3u

2015-02-15 18:00 - 2015-02-15 18:00 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (54).m3u

2015-02-15 17:34 - 2015-02-15 17:34 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (53).m3u

2015-02-13 12:47 - 2015-02-13 12:47 - 04575232 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr

2015-02-12 14:40 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-02-12 14:40 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-12 14:40 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-02-12 14:40 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-02-11 11:58 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-02-11 11:58 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-02-11 11:58 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 11:58 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-11 11:58 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 11:58 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-02-11 11:58 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-02-11 11:58 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-02-11 11:58 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 11:58 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-02-11 11:58 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-02-11 11:58 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-02-11 11:58 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-02-11 11:58 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-02-11 11:58 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-11 11:58 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-02-11 11:58 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-02-11 11:58 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 11:58 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-02-11 11:58 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-11 11:58 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-02-11 11:58 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-02-11 11:58 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-02-11 11:58 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-11 11:58 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-02-11 11:58 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-02-11 11:58 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-02-11 11:58 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-02-11 11:58 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 11:58 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 11:58 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 11:58 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-02-11 11:58 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-02-11 11:58 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 11:58 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-02-11 11:58 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-02-11 11:58 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-11 11:58 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-11 11:58 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 11:58 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-11 11:58 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-11 11:58 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-02-11 11:58 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-11 11:58 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 11:58 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 11:58 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-11 11:58 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-11 11:58 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-02-11 11:56 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 11:56 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-02-11 11:56 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-02-11 11:56 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-02-11 11:56 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-02-11 11:56 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 11:56 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-02-11 11:56 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 11:56 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-02-11 11:56 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-02-11 11:56 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-02-11 11:56 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-02-11 11:56 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-02-11 11:56 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-02-11 11:56 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 11:56 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 11:56 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-11 11:56 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-11 11:56 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-11 11:56 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-11 11:56 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-11 11:56 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-11 11:56 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 11:56 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-11 11:56 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-02-11 11:56 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-11 11:56 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 11:56 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 11:56 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 11:56 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-02-11 11:55 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-10 22:04 - 2015-02-10 22:04 - 13068058 _____ () C:\Users\Admin\Downloads\Liquid+Helium+Blueberry+v1.1.zip

2015-02-10 14:11 - 2015-02-10 14:12 - 35377379 _____ () C:\Users\Admin\Downloads\Lillia+mix.rar

2015-02-09 15:00 - 2015-02-09 15:00 - 09654742 _____ () C:\Users\Admin\Downloads\Skarfoze.rar

2015-02-09 14:34 - 2015-02-09 14:34 - 00000927 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk

2015-02-09 14:34 - 2015-02-09 14:34 - 00000919 _____ () C:\Users\Admin\Desktop\osu!.lnk

2015-02-09 14:31 - 2015-02-09 14:32 - 03231304 _____ (ppy) C:\Users\Admin\Downloads\osu!install (2).exe

2015-02-08 15:14 - 2015-02-08 15:10 - 1258946606 _____ () C:\Users\Admin\Desktop\Play Megurine Luka - Just be Friends On Osu!.trec

2015-02-05 21:38 - 2015-02-05 21:38 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (52).m3u

2015-02-05 21:38 - 2015-02-05 21:38 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (51).m3u

2015-02-05 21:27 - 2015-02-05 21:27 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (50).m3u

2015-02-05 21:19 - 2015-02-05 21:19 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (49).m3u

2015-02-04 23:04 - 2015-02-04 23:04 - 15763462 _____ () C:\Users\Admin\Downloads\Kagamine-Len-The-First-Christmas.mp4

2015-02-04 21:16 - 2015-02-04 21:16 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (48).m3u

2015-02-03 00:35 - 2015-02-03 00:45 - 00000000 ____D () C:\Program Files (x86)\Vocaloid3FE2

2015-02-03 00:33 - 2015-02-03 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOCALOID DEMO MIRIAM

2015-02-03 00:33 - 2015-02-03 00:33 - 00000000 ____D () C:\Program Files (x86)\VOCALOIDDemoMiriam

2015-02-03 00:33 - 1998-06-17 18:07 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfc42loc.dll

2015-02-03 00:28 - 2015-02-03 00:28 - 00000000 ____D () C:\Users\Admin\Downloads\V3_ActivationTool (2)

2015-02-03 00:27 - 2015-02-03 00:28 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool (2).rar

2015-02-03 00:24 - 2015-02-03 00:25 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE) (2).rar

2015-02-03 00:17 - 2015-02-03 00:18 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE) (1).rar

2015-02-03 00:04 - 2015-02-03 00:04 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool (1).rar

2015-02-03 00:02 - 2015-02-03 00:02 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool.rar

2015-02-02 23:54 - 2015-02-02 23:54 - 00000000 ____D () C:\Users\Admin\AppData\Local\VOCALOID3

2015-02-02 23:53 - 2015-02-03 00:37 - 00001059 _____ () C:\Users\Admin\Desktop\Vocaloid3FE.lnk

2015-02-02 23:53 - 2015-02-03 00:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vocaloid3FE

2015-02-02 23:53 - 2015-02-03 00:14 - 00000000 ____D () C:\Program Files (x86)\Vocaloid3FE

2015-02-02 23:48 - 2015-02-02 23:49 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE).rar

2015-02-02 19:40 - 2015-02-02 19:40 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (47).m3u

2015-02-01 19:29 - 2015-02-01 19:29 - 19408699 _____ () C:\Users\Admin\Downloads\12350 Arashi - Kaze no Mukou e.osz

2015-02-01 18:22 - 2015-02-01 18:25 - 22588201 _____ () C:\Users\Admin\Downloads\196238 Giga-P - Pinko Stick Luv.osz

2015-02-01 18:21 - 2015-02-01 18:21 - 01930245 _____ () C:\Users\Admin\Downloads\147112 Giga Pudding - Giga Pudding.osz

2015-01-31 18:13 - 2015-01-31 18:15 - 08064407 _____ () C:\Users\Admin\Downloads\181445 Fall Out Boy - The Phoenix.osz

2015-01-31 18:11 - 2015-01-31 18:11 - 02990119 _____ () C:\Users\Admin\Downloads\202937 Royal Republic - Tommy Gun.osz

2015-01-30 22:06 - 2015-01-30 22:06 - 02727182 _____ () C:\Users\Admin\Desktop\Music_Box_by_baggagelizard.mpeg

2015-01-30 21:14 - 2015-01-30 21:14 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (46).m3u

2015-01-30 18:07 - 2015-01-30 18:07 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (45).m3u

2015-01-30 15:13 - 2015-01-30 15:13 - 00000710 _____ () C:\Users\Admin\Desktop\Vanilla_Sky_-_A_Thousand_Miles_2011_NEW_Version_1440p.lnk

2015-01-29 21:28 - 2015-01-29 21:28 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (44).m3u

2015-01-29 20:50 - 2015-01-29 20:50 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (43).m3u

2015-01-28 19:38 - 2015-01-28 19:38 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (42).m3u

2015-01-28 19:03 - 2015-01-28 19:03 - 00000110 _____ () C:\Users\Admin\Downloads\listen.pls

2015-01-27 18:26 - 2015-01-27 18:26 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (41).m3u

2015-01-26 21:08 - 2015-01-26 21:12 - 53397089 _____ () C:\Users\Admin\Downloads\StepMania-v5.0-beta-4a.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-25 00:06 - 2014-06-24 13:17 - 01783892 _____ () C:\Windows\WindowsUpdate.log

2015-02-24 23:52 - 2014-07-11 16:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-24 22:56 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-24 22:56 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-24 22:50 - 2014-08-18 22:43 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe

2015-02-24 22:49 - 2014-06-25 16:55 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref

2015-02-24 22:49 - 2014-05-07 22:31 - 00030528 _____ () C:\Windows\GVTDrv64.sys

2015-02-24 22:48 - 2014-12-24 12:53 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys

2015-02-24 22:48 - 2009-07-14 05:51 - 00116579 _____ () C:\Windows\setupact.log

2015-02-24 22:47 - 2014-06-24 13:42 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-24 22:47 - 2010-11-21 04:47 - 00305808 _____ () C:\Windows\PFRO.log

2015-02-24 22:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-24 22:44 - 2014-10-19 17:22 - 00000000 ____D () C:\AdwCleaner

2015-02-24 21:41 - 2014-07-09 09:37 - 00000000 ____D () C:\Users\Admin\Desktop\Spiele

2015-02-24 21:21 - 2015-01-14 13:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\osu!

2015-02-24 21:21 - 2014-07-09 09:38 - 00000000 ____D () C:\Users\Admin\Desktop\Bilder

2015-02-24 21:20 - 2014-06-24 13:28 - 00000000 ___RD () C:\Users\Admin\Desktop\Programme

2015-02-24 21:19 - 2014-07-09 09:38 - 00000000 ____D () C:\Users\Admin\Desktop\Anime Bilder

2015-02-24 21:11 - 2014-07-08 10:37 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Nettalk

2015-02-24 20:48 - 2014-06-25 17:39 - 00000000 ____D () C:\Program Files (x86)\Google

2015-02-24 20:48 - 2014-06-25 17:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google

2015-02-24 18:47 - 2014-08-16 17:40 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{509FBB83-1B29-45C8-9F05-BAF824224234}

2015-02-24 02:23 - 2011-04-12 08:43 - 00770016 _____ () C:\Windows\system32\perfh007.dat

2015-02-24 02:23 - 2011-04-12 08:43 - 00174334 _____ () C:\Windows\system32\perfc007.dat

2015-02-24 02:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system

2015-02-24 01:57 - 2014-07-17 15:27 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps

2015-02-24 01:55 - 2014-06-24 13:25 - 00000000 ____D () C:\Users\Admin

2015-02-24 00:11 - 2015-01-04 19:02 - 00000000 ____D () C:\Program Files (x86)\Sony

2015-02-23 23:18 - 2014-06-25 17:46 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc

2015-02-23 18:09 - 2014-07-10 21:12 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-02-23 00:03 - 2014-07-16 13:55 - 00000000 ____D () C:\Program Files (x86)\NosTale(DE)

2015-02-22 19:47 - 2014-08-18 23:41 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2015-02-22 19:46 - 2014-08-18 23:00 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-02-22 19:26 - 2014-08-18 23:03 - 00000000 ____D () C:\ProgramData\Adobe

2015-02-22 01:34 - 2014-07-08 13:19 - 00000000 ___RD () C:\Users\Admin\Dropbox

2015-02-22 01:34 - 2014-07-08 13:14 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Dropbox

2015-02-22 00:41 - 2014-11-21 13:31 - 00000207 _____ () C:\Users\Admin\Documents\DesignLibrary_Photoshop.log

2015-02-21 14:54 - 2014-07-20 23:42 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype

2015-02-21 14:06 - 2014-08-04 11:54 - 00000000 __SHD () C:\AI_RecycleBin

2015-02-19 01:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-02-18 16:06 - 2014-07-08 13:18 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-02-13 13:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2015-02-12 14:31 - 2009-07-14 05:45 - 00275408 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-12 14:29 - 2014-12-11 05:17 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 14:29 - 2014-05-07 22:27 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 02:18 - 2014-05-07 21:33 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-12 02:14 - 2014-05-07 21:33 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-10 23:50 - 2014-12-26 00:17 - 00000000 ____D () C:\ProgramData\CyberLink

2015-02-10 22:25 - 2014-09-09 14:17 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Spotify

2015-02-10 22:15 - 2014-09-09 14:19 - 00000000 ____D () C:\Users\Admin\AppData\Local\Spotify

2015-02-09 17:11 - 2014-12-23 00:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-02-09 17:11 - 2014-12-23 00:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-02-09 17:11 - 2014-08-18 23:01 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-09 13:05 - 2014-07-11 16:15 - 00000000 ____D () C:\Users\Admin\Documents\Camtasia Studio

2015-02-07 18:39 - 2014-07-10 21:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-02-05 13:52 - 2014-07-11 16:19 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-05 13:52 - 2014-07-11 16:19 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-02-05 13:52 - 2014-07-11 16:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-03 00:33 - 2014-05-07 21:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2015-02-02 13:46 - 2014-07-13 13:29 - 00000000 ____D () C:\Users\Admin\Desktop\Anime Liste
 

==================== Files in the root of some directories =======
 

2014-08-08 23:36 - 2014-08-08 23:36 - 0000017 _____ () C:\Users\Admin\AppData\Local\resmon.resmoncfg

2014-08-11 17:20 - 2014-08-11 17:20 - 0000040 ___SH () C:\ProgramData\.zreglib

2014-07-17 10:30 - 2014-05-18 10:30 - 0000032 ____R () C:\ProgramData\hash.dat

2015-02-24 02:19 - 2015-02-24 02:19 - 0000016 _____ () C:\ProgramData\mntemp
 

Files to move or delete:

====================

C:\ProgramData\hash.dat
 
 

Some content of TEMP:

====================

C:\Users\Admin\AppData\Local\Temp\amazonicon_v10.exe

C:\Users\Admin\AppData\Local\Temp\amazoninstallernircmdc.exe

C:\Users\Admin\AppData\Local\Temp\avgnt.exe

C:\Users\Admin\AppData\Local\Temp\bpmcounter.exe

C:\Users\Admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpigs_d4.dll

C:\Users\Admin\AppData\Local\Temp\Quarantine.exe

C:\Users\Admin\AppData\Local\Temp\sdan.exe

C:\Users\Admin\AppData\Local\Temp\sdapk.exe

C:\Users\Admin\AppData\Local\Temp\sdaspwn.exe

C:\Users\Admin\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Admin\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-23 02:20
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-02-2015

Ran by Admin at 2015-02-25 00:49:17

Running from C:\Users\Admin\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE)

4Story DE 4.4.228 (HKLM-x32\...\4Story_DE_is1) (Version: 4.4.228 - Gameforge4D GmbH)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)

Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden

AION Free-to-Play (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)

Akamai NetSession Interface (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Audacity 1.3.14 (Unicode) (HKLM-x32\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)

AuraKingdom-DE (HKLM-x32\...\AuraKingdom-DE) (Version:  - )

Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

BD_3D Advisor (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.7510 - CyberLink Corp.)

Blu-ray Copy 1.0.52 (HKLM-x32\...\{EE56B531-B655-4afa-9664-0C0970E5798B}_is1) (Version:  - )

BPM Counter 1.6.0.0 (HKLM-x32\...\BPM Counter_is1) (Version: 1.6.0.0 - AbyssMedia.com)

Camtasia Studio 8 (HKLM-x32\...\{DA88ACD2-9753-4B71-A07D-A7153DDFD8E3}) (Version: 8.4.1.1745 - TechSmith Corporation)

Club Cooee (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\ClubCooee) (Version: 1.6.19.0 - cooee GmbH)

Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version:  - )

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.4704.58 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version:  - )

Dropbox (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Dropbox) (Version: 3.2.6 - Dropbox, Inc.)

DVDFab 9.1.8.1 (24/12/2014) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)

EaseUS Partition Master 10.0 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)

Easy Tune 6 B13.0323.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)

Easy Tune 6 B13.0323.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

FFmpeg (Windows) for Audacity Version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )

FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )

FileZilla Client 3.10.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.2 - Tim Kosse)

Firefall (HKLM-x32\...\Steam App 227700) (Version:  - Red 5 Studios)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)

Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

GetAmped2_US (HKLM-x32\...\{16C64969-0B3B-485F-A535-851446976F45}) (Version: 1.00.0000 - CyberStep, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hazard Ops (HKLM-x32\...\{F70DE052-CFFD-4DCB-8DA3-3ECAAFBB7D15}}_is1) (Version: 0.2.0.2042 - Infernum Productions AG)

HP LaserJet Professional CM1410 Series (HKLM-x32\...\{0EF0EA0D-F945-4958-85CC-60FF1E86D216}) (Version:  - Hewlett-Packard)

HP LJ CM1410 MFP Series HP Scan (HKLM-x32\...\{21749F4E-02A1-4828-9A1E-BBDF5929C5D0}) (Version: 1.0.302.0 - Hewlett-Packard Co.)

HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)

HPLaserJetHelp_LearnCenter (HKLM-x32\...\{22FE3793-5961-4ADE-AE66-69D9291C22B1}) (Version: 1.03.0000 - Hewlett-Packard)

HPLJUT (x32 Version: 1.00.0012 - HP) Hidden

hppCM1410LaserJetService (x32 Version: 001.008.00477 - Hewlett-Packard) Hidden

hppFaxDrvCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden

hppFaxUtilityCM1410 (x32 Version: 000.002.00001 - Hewlett-Packard) Hidden

hppLaserJetService (x32 Version: 002.015.00599 - Hewlett-Packard) Hidden

hppSendFaxCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden

hppTLBXFXCM1410 (x32 Version: 001.012.00948 - Hewlett-Packard) Hidden

hpzTLBXFX (x32 Version: 006.015.01163 - Hewlett-Packard) Hidden

HTTP Headers (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ATTENTION

I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Inhaltsmanager-Assistent für PlayStation(R) (HKLM-x32\...\{E6EB4571-5ADB-4557-8F95-0E0EF5D0F833}) (Version: 3.30.7824.86 - Sony Computer Entertainment Inc.)

Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MediaInfo 0.7.71 (HKLM\...\MediaInfo) (Version: 0.7.71 - MediaArea.net)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)

ModifyRegistry version 0.1 (HKLM-x32\...\{1D5BE6B5-7FD4-4A78-90F2-AF6B53BC8C1C}_is1) (Version: 0.1 - VIA Technologies, Inc.)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nettalk 6.7 (HKLM-x32\...\Nettalk_is1) (Version:  - Nicolas Kruse)

Nostale(DE) (HKLM-x32\...\NosTale(DE)_is1) (Version:  - Gameforge 4D GmbH)

NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Onigiri_US (HKLM-x32\...\{E5A8486E-4E03-4F59-A44A-88399E341F41}) (Version: 1.00.0000 - CyberStep, Inc.)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{b0490fe8-42bc-4799-9516-999d74238117}) (Version: latest - ppy Pty Ltd)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

PalaceChat Version 4.2.173 (HKLM-x32\...\PalaceChat_is1) (Version: 4.2.173 - )

Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PlanetSide 2 (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\SOE-PlanetSide 2) (Version: 1.0.3.183 - Sony Online Entertainment)

Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6767 - Realtek Semiconductor Corp.)

Robocraft (HKLM-x32\...\Steam App 301520) (Version:  - Freejam)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)

Spotify (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Synfig Studio (HKLM-x32\...\synfigstudio) (Version: 0.64.1 - )

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer)

TP-LINK TL-WN851ND Driver (HKLM-x32\...\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}) (Version: 1.00.0000 - TP-LINK)

TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 2.01.0012 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\UnityWebPlayer) (Version: 4.5.4f1 - Unity Technologies ApS)

Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)

VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)

VideoReDo Plus Version 3.10.3.609 (HKLM-x32\...\VideoReDoPlus_is1) (Version:  - DRD Systems, Inc.)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VOCALOID Demo Miriam (HKLM-x32\...\{F6DC889F-CA26-4CB9-8A52-6D188A97696A}) (Version: 1.0.5 - )

Vocaloid3SE Free Edition (HKLM-x32\...\Vocaloid3SE Free Edition_is1) (Version: Vocaloid3SE Free Edition - )

WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 

22-02-2015 01:39:12 paint.net v4.0.5

22-02-2015 19:28:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

22-02-2015 19:28:41 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

24-02-2015 02:21:40 „VMware Player“ jetzt mit Total Uninstall deinstallieren
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2014-08-19 00:50 - 00000995 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1  activate.adobe.com 

127.0.0.1  practivate.adobe.com 

127.0.0.1  lm.licenses.adobe.com

127.0.0.1  na1r.services.adobe.com 

127.0.0.1  hlrcv.stage.adobe.com
 
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0CCB25BB-21C5-463A-ABAD-02D7AA422B7C} - System32\Tasks\{19147A61-19E7-483C-8EA8-38252CD19ACF} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.0.102/de/abandoninstall?page=tsProgressBar

Task: {45317D2E-0FB3-4104-83AE-FB47213FFE67} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe

Task: {4BF2C2CA-D819-402D-9125-F42A77ADDF53} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)

Task: {5D23356C-1F63-429A-A3AB-970DFFF42766} - System32\Tasks\{F642237B-F686-4EC6-9419-5B511E15D260} => pcalua.exe -a C:\Users\Admin\Downloads\wlsetup-all_16.4.3508.0205.exe -d C:\Users\Admin\Downloads

Task: {70A95F39-36AF-4A5C-99D9-321DC60C8706} - System32\Tasks\{B8FFEE0B-EB02-4FA3-9FE9-385CA9161423} => C:\Riot Games\League of Legends\lol.launcher.admin.exe [2013-06-12] ()

Task: {7ECF0E32-D2FF-46C7-A581-30B5FD60FBBB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)

Task: {8FF030FC-B8FD-4A4A-9F67-440993ACE0FB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: {B012F16F-4762-48FF-94E0-BD51DE84FE1B} - System32\Tasks\{3A2D0FF1-F1C5-436A-99C7-A368A0EE77B1} => pcalua.exe -a C:\Users\Admin\Downloads\VMware-player-7.0.0-2305329.exe -d C:\Users\Admin\Downloads

Task: {CFD33E12-D968-4AED-A963-4B9A6CDC9448} - System32\Tasks\{50E5A946-419D-4726-97CB-C4DF2FBC7433} => pcalua.exe -a C:\Users\Admin\Downloads\windows-live-movie-maker_18116.exe -d C:\Users\Admin\Downloads

Task: {D4663161-C89A-4AB8-807A-A38A245D6F6C} - System32\Tasks\{5ED00F08-DAD4-4DA4-8402-1CD74FDBAD1B} => pcalua.exe -a C:\Users\Admin\Downloads\wlsetup-web.exe -d C:\Users\Admin\Downloads

Task: {F32BAEC5-7FF9-4005-895A-216C80E612E2} - System32\Tasks\{BED0FA79-6183-4686-968A-7CF9A05E3F9A} => C:\Riot Games\League of Legends\lol.launcher.exe [2013-06-12] ()

Task: {F44E058A-1D41-41A9-84C1-EC2295D9BD2F} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2010-09-22] (Hewlett Packard)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-06-24 13:42 - 2015-01-10 00:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll

2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2014-12-15 02:04 - 2014-12-15 02:12 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2012-01-13 14:04 - 2012-01-13 14:04 - 00219760 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe

2014-08-09 12:19 - 2011-04-11 16:32 - 00788992 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2015-02-24 20:48 - 2015-02-18 02:34 - 01450312 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 00205128 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 10864456 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 26771784 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll

2013-03-23 10:19 - 2013-03-23 10:19 - 02883651 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll

2013-01-25 17:43 - 2013-01-25 17:43 - 00651331 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll

2013-02-01 13:26 - 2013-02-01 13:26 - 01331266 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll

2008-05-07 15:22 - 2008-05-07 15:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll

2012-05-08 15:01 - 2012-05-08 15:01 - 00069632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll

2012-11-27 15:03 - 2012-11-27 15:03 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll

2010-06-24 15:50 - 2010-06-24 15:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll

2011-03-01 19:00 - 2011-03-01 19:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll

2011-10-18 09:26 - 2011-10-18 09:26 - 00024576 _____ () C:\Program Files (x86)\GIGABYTE\ET6\STT.dll

2013-02-01 13:23 - 2013-02-01 13:23 - 01499204 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll

2013-03-05 18:45 - 2013-03-05 18:45 - 01335362 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll

2013-03-23 10:59 - 2013-03-23 10:59 - 01433674 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll

2003-02-14 14:11 - 2003-02-14 14:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll

2012-12-25 15:14 - 2012-12-25 15:14 - 01318988 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll

2012-09-24 01:49 - 2012-09-24 01:49 - 03854336 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll

2012-09-24 01:49 - 2012-09-24 01:49 - 00573440 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll

2013-01-09 17:26 - 2013-01-09 17:26 - 00307200 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL

2014-08-09 12:19 - 2011-05-23 13:32 - 01410048 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00167424 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00128000 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00111616 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL

2015-01-07 21:27 - 2015-01-07 21:27 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll

2015-01-16 16:34 - 2015-01-16 16:34 - 00039200 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll

2010-10-25 14:36 - 2010-10-25 14:36 - 00119864 _____ () C:\Program Files (x86)\HP\ToolboxFX\bin\nativeutils.dll

2015-01-12 19:47 - 2014-11-04 10:38 - 00867080 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\common\UNO\UNO.dll

2015-01-12 19:47 - 2013-12-10 08:39 - 00074240 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ctypes.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00285184 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_hashlib.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00040960 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_socket.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00721920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ssl.pyd

2015-01-07 21:27 - 2015-01-07 21:27 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll

2015-01-07 21:27 - 2015-01-07 21:27 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:0888F409
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Inhaltsmanager-Assistent für PlayStation(R).lnk => C:\Windows\pss\Inhaltsmanager-Assistent für PlayStation(R).lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: ArirangCast => C:\Program Files (x86)\ArirangCast for PC\maru.exe

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Admin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
 

==================== Accounts: =============================
 

Admin (S-1-5-21-2923093104-4289724597-612471131-1000 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-2923093104-4289724597-612471131-500 - Administrator - Disabled)

BitBox (S-1-5-21-2923093104-4289724597-612471131-1001 - Limited - Enabled)

Gast (S-1-5-21-2923093104-4289724597-612471131-501 - Limited - Disabled)
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Microsoft-Teredo-Tunneling-Adapter

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/24/2015 10:48:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
 

Error: (02/24/2015 08:23:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD endpoint registration failed [0]
 

Error: (02/24/2015 03:56:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 01:04:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 00:31:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 02:21:38 AM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ecd316e3-852d-42c3-acf1-5ae15c8191e2}
 
 

System errors:

=============

Error: (02/25/2015 00:18:22 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/25/2015 00:06:30 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:54:38 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:42:45 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:30:53 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:18:59 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:07:07 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 10:55:18 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 10:51:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
 

Error: (02/24/2015 10:48:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "VIA Karaoke digital mixer Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/24/2015 10:48:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
 

Error: (02/24/2015 08:23:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD endpoint registration failed [0]
 

Error: (02/24/2015 03:56:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 01:04:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 00:31:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 02:21:38 AM) (Source: VSS) (EventID: 8194) (User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ecd316e3-852d-42c3-acf1-5ae15c8191e2}
 
 

==================== Memory info =========================== 
 

Processor: AMD FX(tm)-8320 Eight-Core Processor 

Percentage of memory in use: 38%

Total physical RAM: 8173.55 MB

Available physical RAM: 5064.3 MB

Total Pagefile: 16345.3 MB

Available Pagefile: 12752.35 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (Lokaler Datenträger) (Fixed) (Total:820.91 GB) (Free:402.08 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5AAD62B6)

Partition 1: (Active) - (Size=620 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=820.9 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Code:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=83964f1202a71346b3cff6f7fba23a88

# engine=22668

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-03-01 10:54:38

# local_time=2015-03-01 11:54:38 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 99 65279 8389878 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 5919484 176837128 0 0

# scanned=309758

# found=13

# cleaned=13

# scan_time=8469

sh=762FA96568F67903ABAD82B59FB5C33AA9BFC553 ft=1 fh=c71c00114033490d vn="Variante von Win32/BHOUninstaller.AB evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\UniDeaalse\UniDeaalse.exe.vir"

sh=F6F3B8F969A6E05A010366F2500A91C6FC02F26A ft=1 fh=e3df8d3aa49d465d vn="Variante von Win32/Toolbar.SearchSuite.X evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Admin\AppData\Local\torch\Helper.dll.vir"

sh=47B19AB97028D8925579BED54EFEE88C8107D6B6 ft=1 fh=34f71966959b3eb8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\AppData\Local\Temp\DMR\dmr_72.exe"

sh=E2C028A886AA7352539DEE32CBB38770C529A76E ft=1 fh=d2aeb2930bcba9f7 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Desktop\Programme\PDFCreator-1_7_3_setup.exe"

sh=B504CB87F32CB6C74845F103D16B488CB37713F8 ft=1 fh=f62a5746189bc5ff vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\avi.codec.pack.pro.v2.4.0.setup.exe"

sh=DEB00CACAC6F70CD7AF72D3F3E30ED7CFBE20A45 ft=1 fh=5e4204e68bd3d725 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Free Video to Flash Converter - CHIP-Installer.exe"

sh=F18E1DE7241E7FBF579B18808DAEA5E893FAB4EB ft=1 fh=6a93c188426a4421 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"

sh=755099F259708577D8758300E21B8C41368FED67 ft=1 fh=99b51bf87e25c470 vn="Variante von Win32/GetNow.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Nicht bestätigt 597746.crdownload"

sh=FCF8080774F309A3C4293E1B53337E8D7F46AA8C ft=1 fh=c0fcbb256887b577 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Paint NET - CHIP-Installer.exe"

sh=C973C73CD2AB8CA5685E6A879CE5BDC212B847D0 ft=1 fh=3ba16e98d4e8bfa0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Pencil - CHIP-Installer.exe"

sh=477CE704241DF7087FD942F25CCA05215E3D0E59 ft=1 fh=cf0c6b2596da0db6 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Sony Vegas Pro - CHIP-Installer.exe"

sh=89A33B51FAD61DE34E89B7B35008FCD48ED167CF ft=1 fh=79845f0e49d7bed7 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\Total Uninstall - CHIP-Installer.exe"

sh=27564DC291884280007FD7525807A320431956CE ft=1 fh=d713a90523351112 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Admin\Downloads\WinDVD Pro - CHIP-Installer.exe"

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01

Ran by Admin (administrator) on ADMIN-PC on 26-02-2015 01:07:59

Running from C:\Users\Admin\Downloads

Loaded Profiles: Admin (Available profiles: Admin & DefaultAppPool)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Windows\System32\snmp.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe

(Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe

() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe

(Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Nicolas Kruse) C:\Program Files (x86)\Nettalk6\Nettalk.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [HP LaserJet Professional CM1410 Series Fax] => C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2010-08-24] (Hewlett-Packard Company)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [ToolboxFX] => C:\Program Files (x86)\HP\ToolboxFX\bin\HPTLBXFX.exe [58936 2010-10-25] (Hewlett-Packard Company)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)

HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795672 2014-11-04] (CyberLink Corp.)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\RunOnce: [EasyTuneVI] => C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-07-09] ()

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\MountPoints2: {556a2940-1341-11e4-8d12-74d4355f2902} - K:\wubi.exe

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk

ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()

FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Windows\system32\C2MP\npdivx32.dll No File

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKU\S-1-5-21-2923093104-4289724597-612471131-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Extension: Avira Browser Safety - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\abs@avira.com [2015-02-07]

FF Extension: Amazon-Icon - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\amazon-icon@giga.de [2015-02-23]

FF Extension: DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08]

FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9cvrtpa4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-12]
 

Chrome: 

=======

CHR HomePage: Default -> 

CHR StartupUrls: Default -> "", "hxxp://google.de/", "hxxp://istart.webssearches.com/?type=hppp&ts=1402917236&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1402929263&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403001126&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403165571&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403182683&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375", "hxxp://istart.webssearches.com/?type=hppp&ts=1403271853&from=tugs&uid=WDCXWD7500BPVT-24HXZT3_WD-WX91A81J9375J9375"

CHR DefaultSearchKeyword: Default -> google

CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}

CHR DefaultSuggestURL: Default -> 

CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-24]

CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]

CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-24]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-24]

CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-24]

CHR Extension: (Vocalun) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceifdlgmnbopekcihhoohdnfpofnlbne [2015-02-24]

CHR Extension: (Adblock Plus) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-02-24]

CHR Extension: (Google Search) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-24]

CHR Extension: (Nisekoi) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\feajbjkmgkeiipookccieahdjohgbloo [2015-02-24]

CHR Extension: (Google Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-24]

CHR Extension: (AdBlock) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-24]

CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-24]

CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-24]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AdobeUpdateService; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe [710320 2015-01-07] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2015-01-08] (Perfect World Entertainment Inc)

S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-12-29] (EasyAntiCheat Ltd)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-10-09] (Freemake) [File not signed]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [145920 2010-10-25] (HP) [File not signed]

S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-15] ()

R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)

R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)

S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-09] (Microsoft Corporation)

S2 VIAKaraokeService; %SystemRoot%\system32\viakaraokesrv.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed]

S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14920 2013-03-07] () [File not signed]

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]

S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]

R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-02-25] ()

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-24] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()

R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [32456 2014-11-04] (CyberLink Corp.)

S3 AnyDVD; System32\Drivers\AnyDVD.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]

S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]

S3 VUSBSTOR; \SystemRoot\System32\Drivers\vusbstor.sys [X]

S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-26 01:07 - 2015-02-26 01:07 - 00000000 ____D () C:\Users\Admin\Downloads\FRST-OlderVersion

2015-02-25 20:01 - 2015-02-25 20:02 - 83276102 _____ () C:\Users\Admin\Desktop\ONE_PIECE_OP_16_Hands_Up_HD (1).avi

2015-02-25 19:49 - 2015-02-25 19:49 - 83276334 _____ () C:\Users\Admin\Desktop\ONE_PIECE_OP_16_Hands_Up_HD.avi

2015-02-25 19:02 - 2015-02-25 19:02 - 00000000 ____D () C:\Windows\SysWOW64\QuickTime

2015-02-25 19:02 - 2015-02-25 19:02 - 00000000 ____D () C:\Windows\SysWOW64\custom matrices

2015-02-25 19:02 - 2015-02-25 19:02 - 00000000 ____D () C:\Windows\SysWOW64\C2MP

2015-02-25 19:02 - 2015-02-25 19:02 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\D-i-v-X - AVI Codec Pack Pro

2015-02-25 19:01 - 2015-02-25 19:02 - 17538685 _____ (D-i-v-X) C:\Users\Admin\Downloads\avi.codec.pack.pro.v2.4.0.setup.exe

2015-02-25 18:41 - 2015-02-25 18:41 - 00001551 _____ () C:\Users\Public\Desktop\Free Video to Flash Converter.lnk

2015-02-25 18:41 - 2015-02-25 18:41 - 00001260 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2015-02-25 18:41 - 2015-02-25 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-02-25 18:40 - 2015-02-25 18:41 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft

2015-02-25 18:40 - 2015-02-25 18:40 - 00010848 _____ () C:\Users\Admin\Desktop\Ohne Titel9.veg

2015-02-25 18:40 - 2015-02-25 18:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Sony Creative Software Inc

2015-02-25 18:40 - 2015-02-25 18:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\RHEng

2015-02-25 18:35 - 2015-02-25 18:35 - 01203488 _____ () C:\Users\Admin\Downloads\Free Video to Flash Converter - CHIP-Installer.exe

2015-02-25 14:37 - 2015-02-25 14:37 - 00000036 _____ () C:\Users\Admin\Desktop\Ohne Titel3.avi.sfl

2015-02-25 14:35 - 2015-02-25 14:37 - 568366080 _____ () C:\Users\Admin\Desktop\Ohne Titel3.avi

2015-02-25 14:34 - 2015-02-25 14:34 - 00000000 _____ () C:\Windows\System.ini,

2015-02-25 14:34 - 2015-02-25 14:34 - 00000000 _____ () C:\Windows\Control.ini,

2015-02-25 14:33 - 2015-02-25 14:34 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Debugmode

2015-02-25 14:33 - 2015-02-25 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode

2015-02-25 14:33 - 2015-02-25 14:33 - 00000000 ____D () C:\Program Files (x86)\DebugMode

2015-02-25 14:32 - 2015-02-25 14:32 - 00221508 _____ () C:\Users\Admin\Downloads\fssetup-2.14.exe

2015-02-25 14:18 - 2015-02-25 14:18 - 00000036 _____ () C:\Users\Admin\Documents\Ohne Titel.avi.sfl

2015-02-25 14:08 - 2015-02-25 14:08 - 08247808 _____ () C:\Users\Admin\Documents\One Piece Hands Up Gerendert.avi

2015-02-25 14:08 - 2015-02-25 14:08 - 00000054 _____ () C:\Users\Admin\Documents\One Piece Hands Up Gerendert.avi.sfl

2015-02-25 00:49 - 2015-02-25 00:49 - 00040448 _____ () C:\Users\Admin\Downloads\Addition.txt

2015-02-25 00:48 - 2015-02-26 01:08 - 00000000 ____D () C:\FRST

2015-02-25 00:48 - 2015-02-26 01:07 - 00023769 _____ () C:\Users\Admin\Downloads\FRST.txt

2015-02-25 00:46 - 2015-02-26 01:07 - 02087936 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe

2015-02-25 00:40 - 2015-02-25 00:40 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (60).m3u

2015-02-25 00:36 - 2015-02-25 00:36 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (59).m3u

2015-02-24 22:13 - 2015-02-24 22:13 - 02126848 _____ () C:\Users\Admin\Downloads\adwcleaner_4.111 (1).exe

2015-02-24 21:35 - 2015-02-24 21:35 - 00000000 ____D () C:\Windows\pss

2015-02-24 21:08 - 2015-02-24 21:08 - 00573697 _____ () C:\Users\Admin\Downloads\Autoruns.zip

2015-02-24 21:08 - 2015-02-24 21:08 - 00000000 ____D () C:\Users\Admin\Downloads\Autoruns

2015-02-24 20:48 - 2015-02-24 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-02-24 20:45 - 2015-02-26 00:50 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-24 20:45 - 2015-02-25 20:50 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-24 20:45 - 2015-02-24 20:45 - 00880208 _____ (Google Inc.) C:\Users\Admin\Downloads\ChromeSetup.exe

2015-02-24 20:45 - 2015-02-24 20:45 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-24 20:45 - 2015-02-24 20:45 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-24 20:33 - 2015-02-24 20:33 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\TeamViewer

2015-02-24 19:36 - 2015-02-24 22:16 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-24 19:35 - 2015-02-24 19:35 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-24 19:35 - 2015-02-24 19:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-02-24 19:35 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-24 19:35 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-24 19:35 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-02-24 19:33 - 2015-02-24 19:33 - 02126848 _____ () C:\Users\Admin\Downloads\adwcleaner_4.111.exe

2015-02-24 19:31 - 2015-02-24 19:31 - 01203488 _____ () C:\Users\Admin\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

2015-02-24 15:48 - 2015-02-24 15:48 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Publish Providers

2015-02-24 02:34 - 2015-02-24 02:34 - 00004180 _____ () C:\Users\Admin\Documents\Registrierungs-Backup.reg

2015-02-24 02:19 - 2015-02-24 02:19 - 00000016 _____ () C:\ProgramData\mntemp

2015-02-24 02:17 - 2015-02-24 02:17 - 01203488 _____ () C:\Users\Admin\Downloads\Total Uninstall - CHIP-Installer.exe

2015-02-24 01:30 - 2015-02-24 01:55 - 00002608 _____ () C:\Users\Admin\Vegas Pro registrieren.htm

2015-02-24 01:15 - 2015-02-24 01:16 - 18327667 _____ () C:\Users\Admin\Desktop\Miku_Hatsune_The_MMORPG_Addict_s_Anthem.mp4

2015-02-24 00:11 - 2015-02-24 01:27 - 00000000 ____D () C:\Users\Admin\AppData\Local\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\ProgramData\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-02-24 00:11 - 2015-02-24 00:11 - 00000000 ____D () C:\Program Files\Sony

2015-02-23 23:41 - 2015-02-25 14:08 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Sony

2015-02-23 23:17 - 2015-02-23 23:17 - 01203488 _____ () C:\Users\Admin\Downloads\Sony Vegas Pro - CHIP-Installer.exe

2015-02-23 23:15 - 2015-02-23 23:16 - 10033873 _____ (www.H264Encoder.com ) C:\Users\Admin\Downloads\h264encoder_setup.exe

2015-02-23 18:13 - 2015-02-23 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Abyssmedia

2015-02-23 18:13 - 2015-02-23 18:13 - 00000000 ____D () C:\Program Files (x86)\Abyssmedia

2015-02-23 18:12 - 2015-02-23 18:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Temp9fe011dc92dd9621139c96a06cabaccd

2015-02-23 17:54 - 2015-02-23 17:55 - 17445213 _____ () C:\Users\Admin\Desktop\Sword_Art_Online_II_-_Courage_German_FanCover_by_Chocolatex3Music.mp4

2015-02-22 22:38 - 2015-02-22 22:39 - 16826742 _____ () C:\Users\Admin\Downloads\47688 Glaze (WoodenToaster) ft. Brony Dance Party - Rainbow Factory.osz

2015-02-22 20:10 - 2015-02-24 15:34 - 00000000 ____D () C:\Program Files (x86)\HTTP Headers

2015-02-22 20:08 - 2015-02-22 20:12 - 00000000 ____D () C:\ProgramData\{3fdfb0fb-2771-dd64-3fdf-fb0fb277c3ec}

2015-02-22 19:52 - 2015-02-22 19:52 - 00761344 _____ (LIVE__SofT__ACTION) C:\Users\Admin\Downloads\Nicht bestätigt 597746.crdownload

2015-02-22 19:31 - 2015-02-22 19:31 - 00001059 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk

2015-02-22 19:30 - 2015-02-22 19:45 - 00000000 ____D () C:\Program Files\Adobe

2015-02-22 18:35 - 2015-02-22 18:35 - 03248982 _____ () C:\Users\Admin\Downloads\AP000C6K.rar

2015-02-22 18:07 - 2015-02-22 18:08 - 01473138 _____ () C:\Users\Admin\Downloads\Effects-AttilaProPack.Paint.NET.v1.exe

2015-02-22 17:54 - 2015-02-22 18:02 - 11027783 _____ () C:\Users\Admin\Downloads\Effects-MegaloPack.Paint.NET.v23.exe

2015-02-22 17:49 - 2015-02-22 17:49 - 00312651 _____ () C:\Users\Admin\Downloads\JPEG_2000.zip

2015-02-22 17:01 - 2015-02-22 17:04 - 64279615 _____ () C:\Users\Admin\Desktop\Comeback_stage_Eddy_Kim_-_My_Love_-_My_Love_Show_Music_core_20150124.mp4

2015-02-22 01:40 - 2015-02-22 01:40 - 00001319 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk

2015-02-22 01:40 - 2015-02-22 01:40 - 00001307 _____ () C:\Users\Public\Desktop\paint.net.lnk

2015-02-22 01:39 - 2015-02-22 17:52 - 00000000 ____D () C:\Program Files\paint.net

2015-02-22 01:39 - 2015-02-22 01:41 - 00000000 ____D () C:\Users\Admin\AppData\Local\paint.net

2015-02-22 01:30 - 2015-02-22 01:36 - 06528454 _____ () C:\Users\Admin\Downloads\paint.net.4.0.5.install.zip

2015-02-22 01:30 - 2015-02-22 01:30 - 05703020 _____ () C:\Users\Admin\Downloads\2.pdn

2015-02-22 01:28 - 2015-02-22 01:28 - 01203488 _____ () C:\Users\Admin\Downloads\Paint NET - CHIP-Installer.exe

2015-02-21 23:59 - 2015-02-21 23:59 - 00001125 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2015-02-21 23:57 - 2015-02-21 23:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3

2015-02-21 23:55 - 2015-02-21 23:56 - 17385800 _____ (Google Inc.) C:\Users\Admin\Downloads\picasa39-setup.exe

2015-02-21 21:50 - 2015-02-21 21:50 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (58).m3u

2015-02-21 19:33 - 2015-02-21 19:35 - 05409296 _____ () C:\Users\Admin\Desktop\10905786_434660763356688_1771128189_n.mp4

2015-02-21 15:58 - 2015-02-21 16:02 - 67812450 _____ () C:\Users\Admin\Desktop\Kagamine_Rin_Len_-_Pinko_Stick_Luv_English_subs_Romaji.mp4

2015-02-20 18:57 - 2015-02-20 19:01 - 66029139 _____ () C:\Users\Admin\Desktop\Park_Myung_Soo_Lizzy_-_Goodbye_PMS_MV_English_subs_Romanization_Hangul_HD.mp4

2015-02-20 18:37 - 2015-02-20 18:37 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (57).m3u

2015-02-20 17:41 - 2015-02-20 17:43 - 51271916 _____ () C:\Users\Admin\Desktop\MV_HALO_-_SURPRISE.mp4

2015-02-20 17:29 - 2015-02-20 17:34 - 61405524 _____ () C:\Users\Admin\Desktop\Soyu_Giriboy_ft._Kihyun_-_Arm_Pillow_MV_English_subs_Romanization_Hangul_HD.mp4

2015-02-20 11:29 - 2015-02-20 11:29 - 00000000 ___RD () C:\Users\Admin\Creative Cloud Files

2015-02-19 21:28 - 2015-02-19 21:28 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (56).m3u

2015-02-17 23:52 - 2015-02-17 23:52 - 00119573 _____ () C:\Users\Admin\Documents\Chat.htm

2015-02-17 19:15 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-02-17 19:15 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-02-17 19:15 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-02-17 19:15 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll

2015-02-15 18:07 - 2015-02-15 18:07 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (55).m3u

2015-02-15 18:00 - 2015-02-15 18:00 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (54).m3u

2015-02-15 17:34 - 2015-02-15 17:34 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (53).m3u

2015-02-13 12:47 - 2015-02-13 12:47 - 04575232 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr

2015-02-12 14:40 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-02-12 14:40 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-12 14:40 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-02-12 14:40 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-02-11 11:58 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-02-11 11:58 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-02-11 11:58 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-02-11 11:58 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 11:58 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-11 11:58 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 11:58 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-02-11 11:58 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-02-11 11:58 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 11:58 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-02-11 11:58 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 11:58 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-02-11 11:58 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-02-11 11:58 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-02-11 11:58 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-02-11 11:58 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-02-11 11:58 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-11 11:58 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-02-11 11:58 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-02-11 11:58 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 11:58 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-02-11 11:58 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-11 11:58 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-02-11 11:58 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-02-11 11:58 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-02-11 11:58 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-02-11 11:58 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-11 11:58 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-02-11 11:58 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-02-11 11:58 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-02-11 11:58 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-02-11 11:58 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 11:58 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 11:58 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 11:58 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-02-11 11:58 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-02-11 11:58 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 11:58 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-02-11 11:58 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-02-11 11:58 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-02-11 11:58 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-02-11 11:58 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 11:58 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-11 11:58 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-11 11:58 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-02-11 11:58 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-11 11:58 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 11:58 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 11:58 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-11 11:58 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-11 11:58 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-02-11 11:58 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-02-11 11:58 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-02-11 11:56 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 11:56 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-02-11 11:56 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-02-11 11:56 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-02-11 11:56 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-02-11 11:56 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-02-11 11:56 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 11:56 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-02-11 11:56 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 11:56 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-02-11 11:56 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-02-11 11:56 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-02-11 11:56 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-02-11 11:56 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-02-11 11:56 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-02-11 11:56 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 11:56 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 11:56 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-11 11:56 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-11 11:56 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-11 11:56 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-11 11:56 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-11 11:56 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-11 11:56 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 11:56 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-11 11:56 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-02-11 11:56 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-02-11 11:56 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 11:56 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 11:56 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 11:56 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-02-11 11:55 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-10 22:04 - 2015-02-10 22:04 - 13068058 _____ () C:\Users\Admin\Downloads\Liquid+Helium+Blueberry+v1.1.zip

2015-02-10 14:11 - 2015-02-10 14:12 - 35377379 _____ () C:\Users\Admin\Downloads\Lillia+mix.rar

2015-02-09 15:00 - 2015-02-09 15:00 - 09654742 _____ () C:\Users\Admin\Downloads\Skarfoze.rar

2015-02-09 14:34 - 2015-02-09 14:34 - 00000927 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk

2015-02-09 14:34 - 2015-02-09 14:34 - 00000919 _____ () C:\Users\Admin\Desktop\osu!.lnk

2015-02-09 14:31 - 2015-02-09 14:32 - 03231304 _____ (ppy) C:\Users\Admin\Downloads\osu!install (2).exe

2015-02-08 15:14 - 2015-02-08 15:10 - 1258946606 _____ () C:\Users\Admin\Desktop\Play Megurine Luka - Just be Friends On Osu!.trec

2015-02-05 21:38 - 2015-02-05 21:38 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (52).m3u

2015-02-05 21:38 - 2015-02-05 21:38 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (51).m3u

2015-02-05 21:27 - 2015-02-05 21:27 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (50).m3u

2015-02-05 21:19 - 2015-02-05 21:19 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (49).m3u

2015-02-04 23:04 - 2015-02-04 23:04 - 15763462 _____ () C:\Users\Admin\Downloads\Kagamine-Len-The-First-Christmas.mp4

2015-02-04 21:16 - 2015-02-04 21:16 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (48).m3u

2015-02-03 00:35 - 2015-02-03 00:45 - 00000000 ____D () C:\Program Files (x86)\Vocaloid3FE2

2015-02-03 00:33 - 2015-02-03 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOCALOID DEMO MIRIAM

2015-02-03 00:33 - 2015-02-03 00:33 - 00000000 ____D () C:\Program Files (x86)\VOCALOIDDemoMiriam

2015-02-03 00:33 - 1998-06-17 18:07 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfc42loc.dll

2015-02-03 00:28 - 2015-02-03 00:28 - 00000000 ____D () C:\Users\Admin\Downloads\V3_ActivationTool (2)

2015-02-03 00:27 - 2015-02-03 00:28 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool (2).rar

2015-02-03 00:24 - 2015-02-03 00:25 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE) (2).rar

2015-02-03 00:17 - 2015-02-03 00:18 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE) (1).rar

2015-02-03 00:04 - 2015-02-03 00:04 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool (1).rar

2015-02-03 00:02 - 2015-02-03 00:02 - 00274805 _____ () C:\Users\Admin\Downloads\V3_ActivationTool.rar

2015-02-02 23:54 - 2015-02-02 23:54 - 00000000 ____D () C:\Users\Admin\AppData\Local\VOCALOID3

2015-02-02 23:53 - 2015-02-03 00:37 - 00001059 _____ () C:\Users\Admin\Desktop\Vocaloid3FE.lnk

2015-02-02 23:53 - 2015-02-03 00:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vocaloid3FE

2015-02-02 23:53 - 2015-02-03 00:14 - 00000000 ____D () C:\Program Files (x86)\Vocaloid3FE

2015-02-02 23:48 - 2015-02-02 23:49 - 43501559 _____ () C:\Users\Admin\Downloads\V3SE(FE).rar

2015-02-02 19:40 - 2015-02-02 19:40 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (47).m3u

2015-02-01 19:29 - 2015-02-01 19:29 - 19408699 _____ () C:\Users\Admin\Downloads\12350 Arashi - Kaze no Mukou e.osz

2015-02-01 18:22 - 2015-02-01 18:25 - 22588201 _____ () C:\Users\Admin\Downloads\196238 Giga-P - Pinko Stick Luv.osz

2015-02-01 18:21 - 2015-02-01 18:21 - 01930245 _____ () C:\Users\Admin\Downloads\147112 Giga Pudding - Giga Pudding.osz

2015-01-31 18:13 - 2015-01-31 18:15 - 08064407 _____ () C:\Users\Admin\Downloads\181445 Fall Out Boy - The Phoenix.osz

2015-01-31 18:11 - 2015-01-31 18:11 - 02990119 _____ () C:\Users\Admin\Downloads\202937 Royal Republic - Tommy Gun.osz

2015-01-30 22:06 - 2015-01-30 22:06 - 02727182 _____ () C:\Users\Admin\Desktop\Music_Box_by_baggagelizard.mpeg

2015-01-30 21:14 - 2015-01-30 21:14 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (46).m3u

2015-01-30 18:07 - 2015-01-30 18:07 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (45).m3u

2015-01-30 15:13 - 2015-01-30 15:13 - 00000710 _____ () C:\Users\Admin\Desktop\Vanilla_Sky_-_A_Thousand_Miles_2011_NEW_Version_1440p.lnk

2015-01-29 21:28 - 2015-01-29 21:28 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (44).m3u

2015-01-29 20:50 - 2015-01-29 20:50 - 00000153 _____ () C:\Users\Admin\Downloads\animeradio (43).m3u

2015-01-28 19:38 - 2015-01-28 19:38 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (42).m3u

2015-01-28 19:03 - 2015-01-28 19:03 - 00000110 _____ () C:\Users\Admin\Downloads\listen.pls

2015-01-27 18:26 - 2015-01-27 18:26 - 00000152 _____ () C:\Users\Admin\Downloads\animeradio (41).m3u
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-26 00:52 - 2014-07-11 16:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-25 22:34 - 2015-01-14 13:50 - 00000000 ____D () C:\Users\Admin\AppData\Local\osu!

2015-02-25 19:40 - 2014-08-16 17:40 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{509FBB83-1B29-45C8-9F05-BAF824224234}

2015-02-25 18:40 - 2014-08-11 21:42 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DVDVideoSoft

2015-02-25 11:59 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-25 11:59 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-25 11:57 - 2014-06-24 13:17 - 01844658 _____ () C:\Windows\WindowsUpdate.log

2015-02-25 11:54 - 2014-08-18 22:43 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe

2015-02-25 11:52 - 2014-12-24 12:53 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys

2015-02-25 11:52 - 2014-06-25 16:55 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref

2015-02-25 11:52 - 2014-05-07 22:31 - 00030528 _____ () C:\Windows\GVTDrv64.sys

2015-02-25 11:51 - 2009-07-14 05:51 - 00116747 _____ () C:\Windows\setupact.log

2015-02-25 11:50 - 2014-06-24 13:42 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-25 11:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-25 01:29 - 2014-07-08 10:37 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Nettalk

2015-02-24 22:47 - 2010-11-21 04:47 - 00305808 _____ () C:\Windows\PFRO.log

2015-02-24 22:44 - 2014-10-19 17:22 - 00000000 ____D () C:\AdwCleaner

2015-02-24 21:41 - 2014-07-09 09:37 - 00000000 ____D () C:\Users\Admin\Desktop\Spiele

2015-02-24 21:21 - 2014-07-09 09:38 - 00000000 ____D () C:\Users\Admin\Desktop\Bilder

2015-02-24 21:20 - 2014-06-24 13:28 - 00000000 ___RD () C:\Users\Admin\Desktop\Programme

2015-02-24 21:19 - 2014-07-09 09:38 - 00000000 ____D () C:\Users\Admin\Desktop\Anime Bilder

2015-02-24 20:48 - 2014-06-25 17:39 - 00000000 ____D () C:\Program Files (x86)\Google

2015-02-24 20:48 - 2014-06-25 17:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google

2015-02-24 02:23 - 2011-04-12 08:43 - 00770016 _____ () C:\Windows\system32\perfh007.dat

2015-02-24 02:23 - 2011-04-12 08:43 - 00174334 _____ () C:\Windows\system32\perfc007.dat

2015-02-24 02:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system

2015-02-24 01:57 - 2014-07-17 15:27 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps

2015-02-24 01:55 - 2014-06-24 13:25 - 00000000 ____D () C:\Users\Admin

2015-02-24 00:11 - 2015-01-04 19:02 - 00000000 ____D () C:\Program Files (x86)\Sony

2015-02-23 23:18 - 2014-06-25 17:46 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\vlc

2015-02-23 18:09 - 2014-07-10 21:12 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-02-23 00:03 - 2014-07-16 13:55 - 00000000 ____D () C:\Program Files (x86)\NosTale(DE)

2015-02-22 19:47 - 2014-08-18 23:41 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2015-02-22 19:46 - 2014-08-18 23:00 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-02-22 19:26 - 2014-08-18 23:03 - 00000000 ____D () C:\ProgramData\Adobe

2015-02-22 01:34 - 2014-07-08 13:19 - 00000000 ___RD () C:\Users\Admin\Dropbox

2015-02-22 01:34 - 2014-07-08 13:14 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Dropbox

2015-02-22 00:41 - 2014-11-21 13:31 - 00000207 _____ () C:\Users\Admin\Documents\DesignLibrary_Photoshop.log

2015-02-21 14:54 - 2014-07-20 23:42 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype

2015-02-21 14:06 - 2014-08-04 11:54 - 00000000 __SHD () C:\AI_RecycleBin

2015-02-19 01:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-02-18 16:06 - 2014-07-08 13:18 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-02-13 13:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2015-02-12 14:31 - 2009-07-14 05:45 - 00275408 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-12 14:29 - 2014-12-11 05:17 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 14:29 - 2014-05-07 22:27 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 02:18 - 2014-05-07 21:33 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-12 02:14 - 2014-05-07 21:33 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-10 23:50 - 2014-12-26 00:17 - 00000000 ____D () C:\ProgramData\CyberLink

2015-02-10 22:25 - 2014-09-09 14:17 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Spotify

2015-02-10 22:15 - 2014-09-09 14:19 - 00000000 ____D () C:\Users\Admin\AppData\Local\Spotify

2015-02-09 17:11 - 2014-12-23 00:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-02-09 17:11 - 2014-12-23 00:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-02-09 17:11 - 2014-08-18 23:01 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-09 13:05 - 2014-07-11 16:15 - 00000000 ____D () C:\Users\Admin\Documents\Camtasia Studio

2015-02-07 18:39 - 2014-07-10 21:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-02-05 13:52 - 2014-07-11 16:19 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-05 13:52 - 2014-07-11 16:19 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-02-05 13:52 - 2014-07-11 16:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-03 00:33 - 2014-05-07 21:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2015-02-02 13:46 - 2014-07-13 13:29 - 00000000 ____D () C:\Users\Admin\Desktop\Anime Liste
 

==================== Files in the root of some directories =======
 

2014-08-08 23:36 - 2014-08-08 23:36 - 0000017 _____ () C:\Users\Admin\AppData\Local\resmon.resmoncfg

2014-08-11 17:20 - 2014-08-11 17:20 - 0000040 ___SH () C:\ProgramData\.zreglib

2014-07-17 10:30 - 2014-05-18 10:30 - 0000032 ____R () C:\ProgramData\hash.dat

2015-02-24 02:19 - 2015-02-24 02:19 - 0000016 _____ () C:\ProgramData\mntemp
 

Files to move or delete:

====================

C:\ProgramData\hash.dat
 
 

Some content of TEMP:

====================

C:\Users\Admin\AppData\Local\Temp\amazonicon_v10.exe

C:\Users\Admin\AppData\Local\Temp\amazoninstallernircmdc.exe

C:\Users\Admin\AppData\Local\Temp\avgnt.exe

C:\Users\Admin\AppData\Local\Temp\bpmcounter.exe

C:\Users\Admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpigs_d4.dll

C:\Users\Admin\AppData\Local\Temp\Quarantine.exe

C:\Users\Admin\AppData\Local\Temp\sdan.exe

C:\Users\Admin\AppData\Local\Temp\sdapk.exe

C:\Users\Admin\AppData\Local\Temp\sdaspwn.exe

C:\Users\Admin\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Admin\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-23 02:20
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-02-2015

Ran by Admin at 2015-02-25 00:49:17

Running from C:\Users\Admin\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE)

4Story DE 4.4.228 (HKLM-x32\...\4Story_DE_is1) (Version: 4.4.228 - Gameforge4D GmbH)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)

Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)

Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden

AION Free-to-Play (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)

Akamai NetSession Interface (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Audacity 1.3.14 (Unicode) (HKLM-x32\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)

AuraKingdom-DE (HKLM-x32\...\AuraKingdom-DE) (Version:  - )

Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

BD_3D Advisor (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.7510 - CyberLink Corp.)

Blu-ray Copy 1.0.52 (HKLM-x32\...\{EE56B531-B655-4afa-9664-0C0970E5798B}_is1) (Version:  - )

BPM Counter 1.6.0.0 (HKLM-x32\...\BPM Counter_is1) (Version: 1.6.0.0 - AbyssMedia.com)

Camtasia Studio 8 (HKLM-x32\...\{DA88ACD2-9753-4B71-A07D-A7153DDFD8E3}) (Version: 8.4.1.1745 - TechSmith Corporation)

Club Cooee (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\ClubCooee) (Version: 1.6.19.0 - cooee GmbH)

Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version:  - )

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.4704.58 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version:  - )

Dropbox (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Dropbox) (Version: 3.2.6 - Dropbox, Inc.)

DVDFab 9.1.8.1 (24/12/2014) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)

EaseUS Partition Master 10.0 Trial Edition (HKLM-x32\...\EaseUS Partition Master Trial Edition_is1) (Version:  - EaseUS)

Easy Tune 6 B13.0323.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)

Easy Tune 6 B13.0323.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

FFmpeg (Windows) for Audacity Version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )

FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )

FileZilla Client 3.10.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.2 - Tim Kosse)

Firefall (HKLM-x32\...\Steam App 227700) (Version:  - Red 5 Studios)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)

Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

GetAmped2_US (HKLM-x32\...\{16C64969-0B3B-485F-A535-851446976F45}) (Version: 1.00.0000 - CyberStep, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hazard Ops (HKLM-x32\...\{F70DE052-CFFD-4DCB-8DA3-3ECAAFBB7D15}}_is1) (Version: 0.2.0.2042 - Infernum Productions AG)

HP LaserJet Professional CM1410 Series (HKLM-x32\...\{0EF0EA0D-F945-4958-85CC-60FF1E86D216}) (Version:  - Hewlett-Packard)

HP LJ CM1410 MFP Series HP Scan (HKLM-x32\...\{21749F4E-02A1-4828-9A1E-BBDF5929C5D0}) (Version: 1.0.302.0 - Hewlett-Packard Co.)

HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)

HPLaserJetHelp_LearnCenter (HKLM-x32\...\{22FE3793-5961-4ADE-AE66-69D9291C22B1}) (Version: 1.03.0000 - Hewlett-Packard)

HPLJUT (x32 Version: 1.00.0012 - HP) Hidden

hppCM1410LaserJetService (x32 Version: 001.008.00477 - Hewlett-Packard) Hidden

hppFaxDrvCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden

hppFaxUtilityCM1410 (x32 Version: 000.002.00001 - Hewlett-Packard) Hidden

hppLaserJetService (x32 Version: 002.015.00599 - Hewlett-Packard) Hidden

hppSendFaxCM1410 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden

hppTLBXFXCM1410 (x32 Version: 001.012.00948 - Hewlett-Packard) Hidden

hpzTLBXFX (x32 Version: 006.015.01163 - Hewlett-Packard) Hidden

HTTP Headers (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ATTENTION

I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Inhaltsmanager-Assistent für PlayStation(R) (HKLM-x32\...\{E6EB4571-5ADB-4557-8F95-0E0EF5D0F833}) (Version: 3.30.7824.86 - Sony Computer Entertainment Inc.)

Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MediaInfo 0.7.71 (HKLM\...\MediaInfo) (Version: 0.7.71 - MediaArea.net)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)

ModifyRegistry version 0.1 (HKLM-x32\...\{1D5BE6B5-7FD4-4A78-90F2-AF6B53BC8C1C}_is1) (Version: 0.1 - VIA Technologies, Inc.)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nettalk 6.7 (HKLM-x32\...\Nettalk_is1) (Version:  - Nicolas Kruse)

Nostale(DE) (HKLM-x32\...\NosTale(DE)_is1) (Version:  - Gameforge 4D GmbH)

NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Onigiri_US (HKLM-x32\...\{E5A8486E-4E03-4F59-A44A-88399E341F41}) (Version: 1.00.0000 - CyberStep, Inc.)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{b0490fe8-42bc-4799-9516-999d74238117}) (Version: latest - ppy Pty Ltd)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

PalaceChat Version 4.2.173 (HKLM-x32\...\PalaceChat_is1) (Version: 4.2.173 - )

Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PlanetSide 2 (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\SOE-PlanetSide 2) (Version: 1.0.3.183 - Sony Online Entertainment)

Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6767 - Realtek Semiconductor Corp.)

Robocraft (HKLM-x32\...\Steam App 301520) (Version:  - Freejam)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)

Spotify (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Synfig Studio (HKLM-x32\...\synfigstudio) (Version: 0.64.1 - )

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer)

TP-LINK TL-WN851ND Driver (HKLM-x32\...\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}) (Version: 1.00.0000 - TP-LINK)

TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 2.01.0012 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-2923093104-4289724597-612471131-1000\...\UnityWebPlayer) (Version: 4.5.4f1 - Unity Technologies ApS)

Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)

VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)

VideoReDo Plus Version 3.10.3.609 (HKLM-x32\...\VideoReDoPlus_is1) (Version:  - DRD Systems, Inc.)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VOCALOID Demo Miriam (HKLM-x32\...\{F6DC889F-CA26-4CB9-8A52-6D188A97696A}) (Version: 1.0.5 - )

Vocaloid3SE Free Edition (HKLM-x32\...\Vocaloid3SE Free Edition_is1) (Version: Vocaloid3SE Free Edition - )

WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-2923093104-4289724597-612471131-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
 

==================== Restore Points  =========================
 

22-02-2015 01:39:12 paint.net v4.0.5

22-02-2015 19:28:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

22-02-2015 19:28:41 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

24-02-2015 02:21:40 „VMware Player“ jetzt mit Total Uninstall deinstallieren
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:34 - 2014-08-19 00:50 - 00000995 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1  activate.adobe.com 

127.0.0.1  practivate.adobe.com 

127.0.0.1  lm.licenses.adobe.com

127.0.0.1  na1r.services.adobe.com 

127.0.0.1  hlrcv.stage.adobe.com
 
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0CCB25BB-21C5-463A-ABAD-02D7AA422B7C} - System32\Tasks\{19147A61-19E7-483C-8EA8-38252CD19ACF} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.0.102/de/abandoninstall?page=tsProgressBar

Task: {45317D2E-0FB3-4104-83AE-FB47213FFE67} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe

Task: {4BF2C2CA-D819-402D-9125-F42A77ADDF53} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)

Task: {5D23356C-1F63-429A-A3AB-970DFFF42766} - System32\Tasks\{F642237B-F686-4EC6-9419-5B511E15D260} => pcalua.exe -a C:\Users\Admin\Downloads\wlsetup-all_16.4.3508.0205.exe -d C:\Users\Admin\Downloads

Task: {70A95F39-36AF-4A5C-99D9-321DC60C8706} - System32\Tasks\{B8FFEE0B-EB02-4FA3-9FE9-385CA9161423} => C:\Riot Games\League of Legends\lol.launcher.admin.exe [2013-06-12] ()

Task: {7ECF0E32-D2FF-46C7-A581-30B5FD60FBBB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-24] (Google Inc.)

Task: {8FF030FC-B8FD-4A4A-9F67-440993ACE0FB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: {B012F16F-4762-48FF-94E0-BD51DE84FE1B} - System32\Tasks\{3A2D0FF1-F1C5-436A-99C7-A368A0EE77B1} => pcalua.exe -a C:\Users\Admin\Downloads\VMware-player-7.0.0-2305329.exe -d C:\Users\Admin\Downloads

Task: {CFD33E12-D968-4AED-A963-4B9A6CDC9448} - System32\Tasks\{50E5A946-419D-4726-97CB-C4DF2FBC7433} => pcalua.exe -a C:\Users\Admin\Downloads\windows-live-movie-maker_18116.exe -d C:\Users\Admin\Downloads

Task: {D4663161-C89A-4AB8-807A-A38A245D6F6C} - System32\Tasks\{5ED00F08-DAD4-4DA4-8402-1CD74FDBAD1B} => pcalua.exe -a C:\Users\Admin\Downloads\wlsetup-web.exe -d C:\Users\Admin\Downloads

Task: {F32BAEC5-7FF9-4005-895A-216C80E612E2} - System32\Tasks\{BED0FA79-6183-4686-968A-7CF9A05E3F9A} => C:\Riot Games\League of Legends\lol.launcher.exe [2013-06-12] ()

Task: {F44E058A-1D41-41A9-84C1-EC2295D9BD2F} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2010-09-22] (Hewlett Packard)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-06-24 13:42 - 2015-01-10 00:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll

2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2014-12-15 02:04 - 2014-12-15 02:12 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2012-01-13 14:04 - 2012-01-13 14:04 - 00219760 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe

2014-08-09 12:19 - 2011-04-11 16:32 - 00788992 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2015-02-24 20:48 - 2015-02-18 02:34 - 01450312 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 00205128 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 10864456 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll

2015-02-24 20:48 - 2015-02-18 02:34 - 26771784 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll

2013-03-23 10:19 - 2013-03-23 10:19 - 02883651 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll

2013-01-25 17:43 - 2013-01-25 17:43 - 00651331 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll

2013-02-01 13:26 - 2013-02-01 13:26 - 01331266 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll

2008-05-07 15:22 - 2008-05-07 15:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll

2012-05-08 15:01 - 2012-05-08 15:01 - 00069632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll

2012-11-27 15:03 - 2012-11-27 15:03 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll

2010-06-24 15:50 - 2010-06-24 15:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll

2011-03-01 19:00 - 2011-03-01 19:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll

2011-10-18 09:26 - 2011-10-18 09:26 - 00024576 _____ () C:\Program Files (x86)\GIGABYTE\ET6\STT.dll

2013-02-01 13:23 - 2013-02-01 13:23 - 01499204 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll

2013-03-05 18:45 - 2013-03-05 18:45 - 01335362 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll

2013-03-23 10:59 - 2013-03-23 10:59 - 01433674 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll

2003-02-14 14:11 - 2003-02-14 14:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll

2012-12-25 15:14 - 2012-12-25 15:14 - 01318988 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll

2012-09-24 01:49 - 2012-09-24 01:49 - 03854336 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll

2012-09-24 01:49 - 2012-09-24 01:49 - 00573440 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll

2013-01-09 17:26 - 2013-01-09 17:26 - 00307200 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL

2014-08-09 12:19 - 2011-05-23 13:32 - 01410048 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00167424 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00128000 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll

2014-08-09 12:19 - 2011-04-11 16:32 - 00111616 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL

2015-01-07 21:27 - 2015-01-07 21:27 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll

2015-01-16 16:34 - 2015-01-16 16:34 - 00039200 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll

2010-10-25 14:36 - 2010-10-25 14:36 - 00119864 _____ () C:\Program Files (x86)\HP\ToolboxFX\bin\nativeutils.dll

2015-01-12 19:47 - 2014-11-04 10:38 - 00867080 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\common\UNO\UNO.dll

2015-01-12 19:47 - 2013-12-10 08:39 - 00074240 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ctypes.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00285184 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_hashlib.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00040960 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_socket.pyd

2015-01-12 19:47 - 2013-12-10 08:39 - 00721920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ssl.pyd

2015-01-07 21:27 - 2015-01-07 21:27 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll

2015-01-07 21:27 - 2015-01-07 21:27 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:0888F409
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-2923093104-4289724597-612471131-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Inhaltsmanager-Assistent für PlayStation(R).lnk => C:\Windows\pss\Inhaltsmanager-Assistent für PlayStation(R).lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: ArirangCast => C:\Program Files (x86)\ArirangCast for PC\maru.exe

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Admin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
 

==================== Accounts: =============================
 

Admin (S-1-5-21-2923093104-4289724597-612471131-1000 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-2923093104-4289724597-612471131-500 - Administrator - Disabled)

BitBox (S-1-5-21-2923093104-4289724597-612471131-1001 - Limited - Enabled)

Gast (S-1-5-21-2923093104-4289724597-612471131-501 - Limited - Disabled)
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Microsoft-Teredo-Tunneling-Adapter

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/24/2015 10:48:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
 

Error: (02/24/2015 08:23:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD endpoint registration failed [0]
 

Error: (02/24/2015 03:56:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 01:04:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 00:31:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 02:21:38 AM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ecd316e3-852d-42c3-acf1-5ae15c8191e2}
 
 

System errors:

=============

Error: (02/25/2015 00:18:22 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/25/2015 00:06:30 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:54:38 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:42:45 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:30:53 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:18:59 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 11:07:07 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 10:55:18 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JOH-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{2741A536-30C8-47A3-B648-88B34F1166E1}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (02/24/2015 10:51:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
 

Error: (02/24/2015 10:48:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "VIA Karaoke digital mixer Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/24/2015 10:48:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 

Error: (02/24/2015 08:23:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
 

Error: (02/24/2015 08:23:00 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcNvVAD endpoint registration failed [0]
 

Error: (02/24/2015 03:56:00 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 01:04:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 00:31:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/24/2015 02:21:38 AM) (Source: VSS) (EventID: 8194) (User: )

Description: 0x80070005, Zugriff verweigert
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {ecd316e3-852d-42c3-acf1-5ae15c8191e2}
 
 

==================== Memory info =========================== 
 

Processor: AMD FX(tm)-8320 Eight-Core Processor 

Percentage of memory in use: 38%

Total physical RAM: 8173.55 MB

Available physical RAM: 5064.3 MB

Total Pagefile: 16345.3 MB

Available Pagefile: 12752.35 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (Lokaler Datenträger) (Fixed) (Total:820.91 GB) (Free:402.08 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5AAD62B6)

Partition 1: (Active) - (Size=620 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=820.9 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================