Trojaner-Board - Unbekannte Programme, ausgespäht?

Danke für die schnelle Antwort!

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-07-2015

Ran by Angela (administrator) on INFINITY on 08-07-2015 09:06:04

Running from C:\Users\Angela\Desktop

Loaded Profiles: UpdatusUser & Angela (Available Profiles: UpdatusUser & Angela & Hazel)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe

(Robert McNeel & Associates) C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe

(McAfee, Inc.) C:\Program Files\mcafee\AppStats\MfeASUM.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe

(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

(Flux Software LLC) C:\Users\Angela\AppData\Local\FluxSoftware\Flux\flux.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Drakonia Configurator\hid.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe

(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\AfterFX.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\32\dynamiclinkmanager.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\32\Adobe QT32 Server.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [393480 2015-03-19] ()

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2876304 2013-01-18] (ELAN Microelectronics Corp.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [819984 2014-04-13] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2303152 2015-07-02] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [246784 2013-03-12] ()

HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1791856 2014-10-16] (Simply Super Software)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)

Winlogon\Notify\igfxcui: igfxdev.dll [X]

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-108176777-2376663096-2928122647-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)

HKU\S-1-5-21-108176777-2376663096-2928122647-1002\...\Run: [f.lux] => C:\Users\Angela\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)

HKU\S-1-5-21-108176777-2376663096-2928122647-1002\...\Run: [GoogleChromeAutoLaunch_DEBAF10BDA66FBC3CFFA808F4FE5DEDC] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-07-07] (Google Inc.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)

AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-06] (Avast Software s.r.o.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-108176777-2376663096-2928122647-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com

HKU\S-1-5-21-108176777-2376663096-2928122647-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com

HKU\S-1-5-21-108176777-2376663096-2928122647-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-108176777-2376663096-2928122647-1002 -> {D22C7E8F-CE8D-4CCA-BA23-DEF6C1B6BED4} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B010DE662D20131106&p={SearchTerms}

SearchScopes: HKU\S-1-5-21-108176777-2376663096-2928122647-1002 -> {FD691F3A-9863-4D21-B195-CB901182C67C} URL = 

BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-11] (Avast Software s.r.o.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)

Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-07-03] (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-07-03] (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-07-03] (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-07-03] (McAfee, Inc.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{1A79E847-26FD-42E9-8CF7-4DB1F6E98B13}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{25DBF75A-10C1-49E3-B6E1-200D7DD4623F}: [DhcpNameServer] 8.8.8.8

Tcpip\..\Interfaces\{DB1DF9AA-FC8A-4E51-8BC2-FAE9EEE933DD}: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-06-25] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-02] (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-06-25] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-02] (Adobe Systems)

FF Plugin HKU\S-1-5-21-108176777-2376663096-2928122647-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-04-18]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Bookmark Sentry (scanner)) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdglbbcbmgnimogcmcdenggkpdmihlga [2014-10-11]

CHR Extension: (Pushbullet) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2014-09-16]

CHR Extension: (uBlock Origin) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-05-06]

CHR Extension: (ThemeBeta.com) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cncgmjeglndpnbebejpnklobpgbgdiai [2014-10-11]

CHR Extension: (Scurry) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\djoifiholmpdceikfaajckcjepbjolof [2014-09-16]

CHR Extension: (Avast SafePrice) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-08-05]

CHR Extension: (Avast Online Security) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-16]

CHR Extension: (Flow Game ) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhkenkiidlghkpkihaiojpjnngfocahn [2014-09-16]

CHR Extension: (Folding@home) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmnbjdgjgikbkapaolimfoidihobnofo [2014-10-20]

CHR Extension: (Clearly) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-10-21]

CHR Extension: (Reddit Enhancement Suite) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-06-25]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-05]

CHR Extension: (SoundCloud Downloader Free) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\libedajeiljdoodmokbppgapcfbignci [2015-07-03]

CHR Extension: (Skype Click to Call) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-07-01]

CHR Extension: (Google Wallet) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-12]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-07]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-07]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-20]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112 2015-06-09] (Adobe Systems Incorporated)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [File not signed]

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-06] (Avast Software s.r.o.)

R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-06] (Avast Software)

S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-08-17] ()

S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-04-13] (BlueStack Systems, Inc.)

S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-04-13] (BlueStack Systems, Inc.)

S4 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [770832 2014-04-13] (BlueStack Systems, Inc.)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3058944 2014-07-22] (Acer Incorporated)

S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2013-01-18] (ELAN Microelectronics Corp.)

S4 Faceless; C:\Users\Angela\AppData\Roaming\Faceless LLC\Faceless Internet Connection\FacelessService.exe [109552 2012-12-07] ()

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [345864 2015-03-19] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-30] (Intel Corporation)

R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [155368 2015-07-03] (McAfee, Inc.)

R2 McNeelUpdate; c:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67944 2014-12-01] (Robert McNeel & Associates)

R2 MfeASUM; C:\Program Files\McAfee\AppStats\MfeASUM.exe [335216 2013-11-18] (McAfee, Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-06] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-06] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-06] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-06] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-06] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-06] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-06] ()

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [121616 2014-04-13] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)

S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)

R1 MfeASKM; C:\Program Files\McAfee\AppStats\MfeASKM.sys [31408 2013-11-18] (McAfee, Inc.)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)

S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)

R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-06] (Avast Software)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-08 09:06 - 2015-07-08 09:06 - 00025540 _____ C:\Users\Angela\Desktop\FRST.txt

2015-07-08 09:06 - 2015-07-08 09:06 - 00000000 ____D C:\FRST

2015-07-08 09:05 - 2015-07-08 09:05 - 02112512 _____ (Farbar) C:\Users\Angela\Desktop\FRST64.exe

2015-07-08 08:35 - 2015-07-08 08:35 - 00000000 ____D C:\Users\Angela\Desktop\Safety

2015-07-08 08:22 - 2015-07-08 09:04 - 00000000 ____D C:\AdwCleaner

2015-07-08 08:22 - 2015-07-08 08:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-07-08 08:22 - 2015-07-08 08:22 - 00000000 ____D C:\ProgramData\Apple Computer

2015-07-08 08:22 - 2015-07-08 08:22 - 00000000 ____D C:\Program Files (x86)\QuickTime

2015-07-08 01:24 - 2015-07-08 01:24 - 00001098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.lnk

2015-07-08 01:10 - 2015-07-08 01:10 - 00001044 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2015.lnk

2015-07-07 00:58 - 2015-07-07 00:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-07-03 17:54 - 2015-07-03 17:54 - 00000000 ____D C:\Users\Angela\Downloads\Sound Cloud

2015-06-30 18:57 - 2015-06-30 18:57 - 00000000 ____D C:\Users\Angela\Tracing

2015-06-30 18:55 - 2015-07-07 18:44 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Skype

2015-06-30 18:55 - 2015-07-07 00:58 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk

2015-06-30 18:55 - 2015-07-07 00:58 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-06-30 18:55 - 2015-07-07 00:58 - 00000000 ____D C:\ProgramData\Skype

2015-06-30 18:55 - 2015-06-30 18:55 - 00000000 ____D C:\Users\Angela\AppData\Local\Skype

2015-06-29 19:23 - 2015-06-29 19:23 - 00000000 ____D C:\Users\Angela\Downloads\RazoDroiD v2.5_For_s5830-i

2015-06-29 17:27 - 2015-06-29 17:27 - 00000000 ____D C:\Users\Angela\Downloads\Odin_3.10.0

2015-06-29 17:10 - 2015-06-29 17:10 - 03689432 _____ C:\Users\Angela\Downloads\SAMSUNG_Android_USB_Composite_Device_Driver_5.28.2.1.zip

2015-06-17 00:23 - 2015-06-17 00:23 - 00094208 _____ (Apple Inc.) C:\WINDOWS\SysWOW64\QuickTimeVR.qtx

2015-06-17 00:23 - 2015-06-17 00:23 - 00069632 _____ (Apple Inc.) C:\WINDOWS\SysWOW64\QuickTime.qts

2015-06-12 23:30 - 2015-07-07 17:19 - 00001121 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

2015-06-11 15:51 - 2015-06-11 15:51 - 00000000 ____D C:\Users\Angela\AppData\Local\GWX

2015-06-11 15:45 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2015-06-11 15:45 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-06-11 15:45 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2015-06-11 15:33 - 2015-05-16 00:01 - 00133288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2015-06-11 15:33 - 2015-05-15 23:05 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2015-06-11 15:33 - 2015-05-15 22:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll

2015-06-11 15:33 - 2015-05-15 22:23 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2015-06-11 15:33 - 2015-05-15 21:42 - 03682304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-06-11 15:33 - 2015-05-15 21:32 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2015-06-11 15:33 - 2015-05-15 21:31 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2015-06-11 15:33 - 2015-05-15 21:28 - 02223104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2015-06-11 15:33 - 2015-05-15 21:28 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2015-06-11 15:33 - 2015-05-15 21:28 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2015-06-11 15:33 - 2015-05-15 21:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2015-06-11 15:33 - 2015-05-15 21:21 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2015-06-11 15:33 - 2015-05-15 21:21 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2015-06-11 15:33 - 2015-05-15 21:19 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2015-06-11 15:33 - 2015-05-15 21:19 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2015-06-11 15:32 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml

2015-06-11 15:32 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll

2015-06-11 15:32 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2015-06-11 15:32 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2015-06-11 15:32 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2015-06-11 15:32 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll

2015-06-11 15:32 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll

2015-06-11 15:31 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll

2015-06-11 15:31 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2015-06-11 15:31 - 2015-04-16 08:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2015-06-11 15:31 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2015-06-11 15:31 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2015-06-11 15:31 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-06-11 15:31 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-06-11 15:31 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll

2015-06-11 15:31 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2015-06-11 15:31 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2015-06-11 15:31 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2015-06-11 15:31 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2015-06-11 15:31 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll

2015-06-11 15:31 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2015-06-11 15:31 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2015-06-11 15:31 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2015-06-11 15:31 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2015-06-11 15:31 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2015-06-11 15:31 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2015-06-11 15:31 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2015-06-11 15:31 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2015-06-11 15:31 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2015-06-11 15:31 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2015-06-10 16:00 - 2015-06-20 05:02 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-06-10 16:00 - 2015-06-20 05:02 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-06-10 15:53 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-06-10 15:53 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-06-10 15:53 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-06-10 15:53 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2015-06-10 15:53 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-06-10 15:53 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2015-06-10 15:53 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-06-10 15:53 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2015-06-10 15:53 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-06-10 15:53 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-06-10 15:53 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-06-10 15:53 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-06-10 15:53 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-06-10 15:53 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2015-06-10 15:53 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-06-10 15:53 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2015-06-10 15:53 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2015-06-10 15:53 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-06-10 15:53 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-06-10 15:53 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2015-06-10 15:53 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-06-10 15:53 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll

2015-06-10 15:53 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll

2015-06-10 15:52 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-06-10 15:52 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2015-06-10 15:52 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2015-06-10 15:52 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2015-06-10 15:52 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2015-06-10 15:52 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2015-06-10 15:52 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2015-06-10 15:52 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2015-06-10 15:52 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2015-06-10 15:52 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2015-06-10 15:52 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-06-10 15:52 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2015-06-10 15:52 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2015-06-10 15:52 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2015-06-10 15:52 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2015-06-10 15:52 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2015-06-10 15:52 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2015-06-10 15:52 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2015-06-10 15:52 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2015-06-10 15:52 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-07-08 09:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru

2015-07-08 08:39 - 2014-05-07 18:08 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf6a0ea16b7162.job

2015-07-08 08:39 - 2013-11-07 01:06 - 00000000 ___DO C:\Users\Angela\SkyDrive

2015-07-08 08:39 - 2013-11-06 17:39 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-108176777-2376663096-2928122647-1002

2015-07-08 08:37 - 2013-11-15 02:30 - 00000000 ____D C:\Users\Angela\AppData\Local\Adobe

2015-07-08 08:37 - 2013-10-06 03:22 - 00000000 ____D C:\ProgramData\boost_interprocess

2015-07-08 08:34 - 2014-05-07 18:08 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cf6a0ea0ccadab.job

2015-07-08 08:33 - 2015-04-04 09:22 - 00057398 _____ C:\WINDOWS\PFRO.log

2015-07-08 08:33 - 2015-03-12 10:38 - 00020308 _____ C:\WINDOWS\setupact.log

2015-07-08 08:33 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-07-08 08:33 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2015-07-08 08:25 - 2013-11-07 14:37 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-07-08 08:15 - 2013-11-07 00:43 - 01417260 _____ C:\WINDOWS\WindowsUpdate.log

2015-07-08 07:56 - 2013-11-08 10:14 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6834C5F8-F3C9-4005-853E-42D41B05EBD3}

2015-07-08 07:47 - 2013-04-18 12:08 - 00000000 ____D C:\Program Files (x86)\McAfee

2015-07-08 07:46 - 2015-05-07 00:05 - 05065408 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-07-08 07:26 - 2014-12-08 18:14 - 00000000 ____D C:\Users\Angela\Downloads\Adobe

2015-07-08 07:00 - 2014-07-13 15:45 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-07-08 06:58 - 2014-07-13 15:41 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-07-08 06:57 - 2013-11-11 16:48 - 00000000 ____D C:\Users\Angela\AppData\Local\CrashDumps

2015-07-08 04:17 - 2014-08-19 10:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2015-07-08 04:17 - 2013-04-18 12:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-07-08 04:15 - 2014-08-19 12:46 - 00000000 ____D C:\Users\Angela\AppData\Local\Ubisoft Game Launcher

2015-07-08 04:12 - 2013-11-06 17:32 - 00000000 ____D C:\Users\Angela\AppData\Local\Packages

2015-07-08 04:12 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-07-08 01:26 - 2014-06-28 10:30 - 00000000 ____D C:\Program Files\Common Files\Adobe

2015-07-08 01:26 - 2014-06-28 10:30 - 00000000 ____D C:\Program Files\Adobe

2015-07-08 01:21 - 2014-06-28 10:07 - 00000000 ____D C:\ProgramData\Package Cache

2015-07-08 01:09 - 2013-11-06 17:33 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Adobe

2015-07-07 17:19 - 2015-04-05 10:08 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2015-07-07 17:19 - 2014-06-28 10:05 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-07-07 00:55 - 2013-12-13 23:08 - 00000000 ____D C:\Users\Angela\Documents\Kontoauszüge

2015-07-05 21:57 - 2014-01-04 23:31 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update

2015-07-04 17:21 - 2015-04-04 12:54 - 00000000 ____D C:\Program Files\Tor Browser

2015-06-30 18:57 - 2013-11-07 00:48 - 00000000 ____D C:\Users\Angela

2015-06-26 21:26 - 2014-01-04 23:31 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys

2015-06-25 00:25 - 2013-11-07 14:37 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2015-06-24 14:47 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-06-24 13:21 - 2014-12-23 16:15 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2015-06-16 20:59 - 2014-01-31 21:26 - 00000000 ____D C:\Program Files (x86)\Steam

2015-06-11 22:24 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache

2015-06-11 15:50 - 2015-04-09 22:54 - 00000401 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

2015-06-11 15:48 - 2014-05-12 20:03 - 00000000 ____D C:\WINDOWS\SysWOW64\NV

2015-06-11 15:48 - 2014-05-12 20:03 - 00000000 ____D C:\WINDOWS\system32\NV

2015-06-11 15:47 - 2014-12-10 17:58 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-06-11 15:47 - 2014-07-09 07:54 - 00000000 ___SD C:\WINDOWS\system32\CompatTel

2015-06-11 15:47 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData

2015-06-11 15:42 - 2013-09-30 06:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-06-11 15:42 - 2013-09-30 05:56 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat

2015-06-11 15:42 - 2013-09-30 05:56 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat

2015-06-11 15:41 - 2015-03-12 10:38 - 00000356 _____ C:\WINDOWS\setuperr.log

2015-06-11 15:40 - 2013-11-06 21:25 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-06-11 15:36 - 2013-11-06 21:25 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-06-11 15:33 - 2015-04-04 11:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX

2015-06-11 15:33 - 2015-04-04 11:47 - 00000000 ___SD C:\WINDOWS\system32\GWX

2015-06-10 15:57 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
 

==================== Files in the root of some directories =======
 

2014-04-04 21:16 - 2014-04-06 11:55 - 0003584 _____ () C:\Users\Angela\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-12-07 14:02 - 2014-12-07 14:02 - 0007643 _____ () C:\Users\Angela\AppData\Local\HWVendorDetection.log

2014-06-07 08:31 - 2014-06-07 08:31 - 0000860 _____ () C:\Users\Angela\AppData\Local\recently-used.xbel

2013-10-06 03:05 - 2013-10-06 03:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Some files in TEMP:

====================

C:\Users\Angela\AppData\Local\Temp\jre-8u45-windows-au.exe

C:\Users\Angela\AppData\Local\Temp\Quarantine.exe

C:\Users\Angela\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-07-08 05:11
 

==================== End of log ============================

--- --- ---

[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x64) Version:05-07-2015

Ran by Angela at 2015-07-08 09:06:36

Running from C:\Users\Angela\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-108176777-2376663096-2928122647-500 - Administrator - Disabled)

Angela (S-1-5-21-108176777-2376663096-2928122647-1002 - Administrator - Enabled) => C:\Users\Angela

Gast (S-1-5-21-108176777-2376663096-2928122647-501 - Limited - Enabled)

Hazel (S-1-5-21-108176777-2376663096-2928122647-1007 - Limited - Enabled) => C:\Users\Hazel

UpdatusUser (S-1-5-21-108176777-2376663096-2928122647-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)

Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)

Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.01.2002 - Acer Incorporated)

Acer USB Charge Manager (HKLM\...\{07E867C5-0C48-40FF-A013-DDAF4565AD47}) (Version: 2.00.3004 - Acer Incorporated)

Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.2.0 - Adobe Systems Incorporated)

Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.1.1 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.1.3.121 - Adobe Systems Incorporated)

Adobe Dreamweaver CC 2015 (HKLM-x32\...\{EE2A0AA8-0386-11E5-8603-BC82F5DB1A71}) (Version: 16.0.0 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.194 - Adobe Systems Incorporated)

Adobe Flash Professional CC 2014 (HKLM-x32\...\{AA704223-E11C-11E3-8A38-C09A633B72AF}) (Version: 14.2 - Adobe Systems Incorporated)

Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.1.1 - Adobe Systems Incorporated)

Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.0.0 - Adobe Systems Incorporated)

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)

AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.01.2010.0 - Acer Incorporated)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Arma 2 (HKLM-x32\...\Steam App 33900) (Version:  - Bohemia Interactive)

ARMA 2 Army of The Czech Republic - Data cache removal (HKLM-x32\...\A2ACR Data cache removal) (Version:  - )

ARMA 2: British Armed Forces - Data cache removal (HKLM-x32\...\A2BAF Data cache removal) (Version:  - )

Arma 2: British Armed Forces (HKLM-x32\...\Steam App 65700) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead Beta (HKLM-x32\...\Steam App 219540) (Version:  - )

ARMA 2: Private Military Company - Data cache removal (HKLM-x32\...\A2PMC Data cache removal) (Version:  - )

Arma 2: Private Military Company (HKLM-x32\...\Steam App 65720) (Version:  - Bohemia Interactive)

Ashampoo Burning Studio FREE v.1.12.0 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.12.0 - Ashampoo GmbH & Co. KG)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)

BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.8.8006 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{689FD579-0642-4D3E-AB61-F63B79C5075A}) (Version: 0.8.8.8006 - BlueStack Systems, Inc.)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)

Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)

Drakonia Configurator (HKLM-x32\...\{A7B243AA-6D4C-4575-A873-6F01A1EFC5E2}}_is1) (Version:  - )

Dropbox (HKU\S-1-5-21-108176777-2376663096-2928122647-1002\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)

ETDWare PS/2-X64 11.6.19.204_WHQL (HKLM\...\Elantech) (Version: 11.6.19.204 - ELAN Microelectronic Corp.)

f.lux (HKU\S-1-5-21-108176777-2376663096-2928122647-1002\...\Flux) (Version:  - )

FormsForWeb® Filler 3.2.3 (HKLM-x32\...\{18815D2C-C62D-4066-94F3-55966581D2A5}) (Version: 3.2.3 - Lucom GmbH)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden

Happy Wars (HKLM-x32\...\Steam App 246280) (Version:  - Toylogic inc.)

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4170 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)

Java 7 Update 80 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle)

Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.354 - McAfee, Inc.)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)

NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)

NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

PrivaZer (HKLM-x32\...\PrivaZer) (Version: 2.30.0.0 - Goversoft LLC)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)

Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.39 - Qualcomm Atheros)

QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)

Realtek PCIE Card Reader (HKLM-x32\...\{C9661090-C134-46E8-90B2-76D72355C2A6}) (Version: 6.2.9200.28140 - Realtek Semiconductor Corp.)

Rhinoceros 5 (64-bit) (HKLM\...\{F724A358-919B-408E-BC4D-14CE89A96AAC}) (Version: 5.10.41201.11145 - Robert McNeel & Associates)

Rhinoceros 5 (HKLM-x32\...\{D46E463D-0B38-44C4-920E-8EA731779E73}) (Version: 5.10.41201.11145 - Robert McNeel & Associates)

Rhinoceros 5 Help Media (HKLM-x32\...\{A97CF7D9-B596-424D-B31C-F89204763451}) (Version: 5.7.31022.19295 - Robert McNeel & Associates)

Rhinoceros 5 Language Pack Installer (en-US) (HKLM-x32\...\{5BEEF6AA-5429-4D03-8985-02B3BF009EB3}) (Version: 5.10.41201.11145 - Robert McNeel & Associates)

Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.)

Samsung Kies3 (x32 Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)

Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)

SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)

Smart View 2.0 (HKLM-x32\...\{FBAAAFAE-08A8-4C63-87EA-4AEA9DEE53E1}) (Version: 1.0.0.0 - Samsung)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Trojan Remover 6.9.1 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.1 - Simply Super Software)

Uninstall (HKLM-x32\...\Faceless Internet Connection_is1) (Version: 1.3.16 - )

Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-108176777-2376663096-2928122647-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
 

==================== Restore Points =========================
 

17-06-2015 22:32:12 Geplanter Prüfpunkt

24-06-2015 14:45:50 Windows Update

02-07-2015 05:38:20 Geplanter Prüfpunkt

08-07-2015 01:05:07 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

08-07-2015 01:05:58 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {0C0FC2EA-9226-4DCF-99D0-DEB8190811F2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)

Task: {15EF37F0-043E-4507-9DA9-BCBC7C043ADE} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-chillichicka4eva@yahoo.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)

Task: {2DE81629-642F-4D66-965A-CBB4F8055BAF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)

Task: {352038CE-C540-4901-83C3-A51970482A53} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)

Task: {489FE5BF-D7E8-483A-8BFA-8BE8D31671BF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)

Task: {59116ADD-4A46-4391-A2CD-6D81D6C5574C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {5D1ADC71-8267-4DFC-8041-FC8FC8F2B64A} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-108176777-2376663096-2928122647-1002

Task: {6338EA8D-11C1-4548-A117-848FA2DFD27A} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)

Task: {76A04DE4-0369-4DF4-B98D-264C7B6C33AF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-06-11] (Microsoft Corporation)

Task: {89D374FE-B7C3-474D-802D-3E010119ABD3} - System32\Tasks\GoogleUpdateTaskMachineUA1cf6a0ea16b7162 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)

Task: {8F2B5D50-FC49-4F37-99F2-E4CA803398A2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {9CC8A577-BF5B-4AE8-94DE-B1839D3BDF56} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-25] (Adobe Systems Incorporated)

Task: {A8093A4F-6A25-4D43-A2BA-B6C69F70E8DB} - System32\Tasks\GoogleUpdateTaskMachineCore1cf6a0ea0ccadab => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)

Task: {B14EC8CA-4C51-43E3-9E42-46F79214341D} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-01-23] (Acer Incorporated)

Task: {CFE8C98A-66D8-48E2-BF4A-48261116664B} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe

Task: {E0016269-49ED-4B59-9C2E-237CEE23361A} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()

Task: {E7B2BE99-57C5-43EE-B664-7E64C7F52D9D} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Red Giant Link.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cf6a0ea0ccadab.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cf6a0ea16b7162.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (Whitelisted) ==============
 

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2014-04-27 13:10 - 2015-03-19 21:02 - 00393480 _____ () C:\WINDOWS\system32\igfxTray.exe

2013-01-25 00:09 - 2013-01-25 00:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-01-25 00:05 - 2013-01-25 00:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll

2013-01-25 00:12 - 2013-01-25 00:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

2014-11-12 17:43 - 2013-03-12 11:06 - 00246784 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe

2014-11-12 17:43 - 2013-03-01 17:43 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe

2015-07-07 17:18 - 2015-06-13 14:16 - 31404192 ____N () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2015-06-19 04:09 - 2015-06-19 04:09 - 00155824 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe

2014-06-04 02:59 - 2014-12-05 10:28 - 01005272 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\aeres1.dll

2014-06-04 00:40 - 2014-06-04 00:40 - 03499008 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\DNxHDCodec.dll

2014-06-04 02:59 - 2014-12-05 10:28 - 00030936 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\(Media Core plug-ins)\Common\ImporterIllustratorAE.prm

2014-06-04 02:59 - 2014-12-05 10:28 - 00257240 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\(Media Core plug-ins)\Common\ImporterPhotoshopAE.prm

2014-06-03 17:49 - 2014-12-04 23:08 - 21018984 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\Plug-ins\Effects\mochaAE\mochashapeconverter4ae.aex

2014-06-04 00:42 - 2014-06-04 00:42 - 01818112 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\Plug-ins\Format\OpenEXR.aex

2014-06-03 17:50 - 2014-12-04 23:10 - 01332736 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\Plug-ins\MAXON CINEWARE AE\Cineware_AE_Exporter.aex

2014-06-03 17:50 - 2014-12-04 23:10 - 01495552 _____ () C:\Program Files\Adobe\Adobe After Effects CC 2014\Support Files\Plug-ins\MAXON CINEWARE AE\Cineware_AE_SceneLayer.aex

2015-05-06 21:26 - 2015-05-06 21:26 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2015-05-06 21:26 - 2015-05-06 21:26 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2015-07-07 20:35 - 2015-07-07 20:35 - 02956288 _____ () C:\Program Files\AVAST Software\Avast\defs\15070701\algo.dll

2015-03-20 16:05 - 2015-03-20 16:05 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-11-12 17:43 - 2013-01-15 18:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll

2015-07-07 23:40 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll

2015-07-07 23:40 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll

2014-11-12 17:43 - 2011-11-22 15:18 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll

2013-10-06 02:59 - 2013-01-23 09:57 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-06-18 18:53 - 2015-06-18 18:53 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00121856 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-imslib\node_modules\ref\build\Release\binding.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00122880 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-imslib\node_modules\ffi\build\Release\ffi_bindings.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00085504 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\bufferutil.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00086016 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\validation.node

2015-06-18 18:53 - 2015-06-18 18:53 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node

2015-07-07 23:40 - 2015-07-07 05:49 - 16285512 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\PepperFlash\pepflashplayer.dll

2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 

AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9

AlternateDataStreams: C:\ProgramData\Temp:DED17083

AlternateDataStreams: C:\Users\Angela\SkyDrive:ms-properties

AlternateDataStreams: C:\Users\Hazel\OneDrive:ms-properties
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-108176777-2376663096-2928122647-1001\Control Panel\Desktop\\Wallpaper -> 

HKU\S-1-5-21-108176777-2376663096-2928122647-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Angela\Downloads\Schwarzer ledriger Hintergrund.jpg

DNS Servers: 192.168.0.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeUpdateService => 2

MSCONFIG\Services: BEService => 3

MSCONFIG\Services: BstHdAndroidSvc => 2

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: BstHdUpdaterSvc => 2

MSCONFIG\Services: BthHFSrv => 3

MSCONFIG\Services: Faceless => 2

HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{209B7D18-491C-4E64-899B-767E6C6640BA}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{609845BB-FF78-45CD-AE17-F5B9840D310D}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{AA632C29-E7DD-49D9-89BF-F6FD36C13F2B}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe

FirewallRules: [{47861F74-27C9-4320-BACD-B07D1892FF0F}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe

FirewallRules: [{30C744F4-10B8-4BC3-9F62-3526EEA9128E}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe

FirewallRules: [{CB25D730-E302-4999-8214-D484C92CB5AA}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe

FirewallRules: [{D6D42FBB-88CC-4376-A53C-D484E378C295}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe

FirewallRules: [{F5D5BDAD-CBEB-4F51-9923-7183D283C04A}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe

FirewallRules: [{0FADBD50-BAEE-47C8-9960-BF4BD6C8C389}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe

FirewallRules: [{C168ACCF-BF90-4823-89D2-90355C88CF57}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe

FirewallRules: [{23A043A5-4274-43D6-B3A1-3ED642AD65A8}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe

FirewallRules: [{6D87DF85-2EC6-4A11-A9E2-B565C9AC0ADC}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe

FirewallRules: [{4FB23536-0D51-45E0-80E7-6F76F59D04EC}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\MusicPlayer.exe

FirewallRules: [{4BFCE1D3-4BEA-4F43-A744-58AD71F6C274}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe

FirewallRules: [{B30E90D0-728E-4084-A4B2-A6D1723645C7}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe

FirewallRules: [{C447200B-F438-4645-BE6D-169922DB2D5F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe

FirewallRules: [{F5DA47CA-6B37-477C-801D-16434FC3A93D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe

FirewallRules: [{B990A8EF-B94E-42F8-ADB4-8292C57E50EB}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe

FirewallRules: [{44105A33-B2BC-4222-B206-95EF42A4C91B}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

FirewallRules: [{52E3BDB9-7834-41EB-8800-A798AC3B834C}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

FirewallRules: [{FC8CFA5F-1DC6-4D87-89EF-36E12647B5E6}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe

FirewallRules: [{8DBE9E93-7136-4BF2-AE99-FA40A89CCAF0}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe

FirewallRules: [{CFE866E0-DADC-4EE0-BC2A-466D65E00AA4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{CB525196-C1B4-404D-BF27-BE4F19E80747}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{A1BB9B59-879B-4EEE-98CE-F9F8216228A2}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe

FirewallRules: [{7DA8A1D5-94A4-4BF0-9A11-07CFB414DB9A}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe

FirewallRules: [{C448AD7A-4408-457A-8032-7206CE94AE3C}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{7CCA9B0D-53A9-4466-A45C-AEAC97EBFBCA}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{FC9E351B-28C5-468D-82ED-3F34ABDDF112}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{8587D900-956B-4F9E-B856-5B81C1421924}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe

FirewallRules: [{3FEC99DB-952C-468B-A0D4-7727036E0CB1}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{4EA5EB50-E469-4E4F-A15A-BD64CFF882FE}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe

FirewallRules: [{95E2F5C1-4797-4D93-935A-5B702F2A05F7}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{1389DF3F-5374-4A21-A5C4-09746DB2C060}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe

FirewallRules: [{1946E867-3058-4421-A5F6-AC05E4939F8F}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{560C451E-64B0-4F47-903C-5B54347ACFB4}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe

FirewallRules: [{565FDE47-1646-4F74-B729-A9A53964DCD6}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{00C5DD18-1867-462D-BD94-B6186CA6099B}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{97753B78-51E5-45AA-8E20-D1E6B8FB3692}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe

FirewallRules: [{57EBFB5A-A028-4D25-8C92-D1075022B554}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe

FirewallRules: [{E3D061E0-99D8-4942-9092-9F91A2AA5624}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe

FirewallRules: [{00494D39-951D-49F7-8E23-97A7FFD6E04C}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe

FirewallRules: [{4EC7FEF6-E92D-4F4F-BEC1-0D36339E7D86}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{F47EB186-8978-44CD-BA6C-A40D0960BD3E}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe

FirewallRules: [{3601E15A-4499-45EB-952A-E0069C4BA513}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{94339F3C-8B8E-45F8-95EB-52D888A83F65}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{E71BD239-2826-4D13-BE50-5DD2298A0216}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe

FirewallRules: [{5BE86607-C3C5-4A6A-9949-7D7D136F124A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe

FirewallRules: [{BBD1F13C-DEC0-4FF9-B9C1-75B7E390F4D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\BAF\datacachepreprocessor.exe

FirewallRules: [{17B28C9D-63BA-4ED5-9A4D-87C40305AC63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\BAF\datacachepreprocessor.exe

FirewallRules: [{A05235B7-6C57-499C-9500-4EFEAB13149B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\PMC\datacachepreprocessor.exe

FirewallRules: [{F7B22272-6BA4-4767-BBAE-32480D4B6D5E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\PMC\datacachepreprocessor.exe

FirewallRules: [{2D8140F1-1938-483F-BAFC-8AB70AD2E914}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe

FirewallRules: [{D3E1C827-5DFA-431F-A5D1-0BAD2AA7711D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe

FirewallRules: [{67DC4E25-F88E-4DE3-913F-7EE145EAF36E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{A44F8232-67C7-4A69-ACE3-EB6B5E42DA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{D9243427-0411-4E58-B79D-4B43207E8B3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{1415C353-455B-42DF-BF5E-1399F169EBC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{ED41C0B3-F6F9-4207-B246-26EE9ADC190A}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{25A5DFC5-E00F-4C39-84DA-D88F34624E9C}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe

FirewallRules: [{8F15A27D-97BD-4E0D-B2E4-9C47145943B2}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe

FirewallRules: [{D07DF4B1-6C28-4F5F-8365-07BD3D1293BC}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe

FirewallRules: [{CFF8FC3F-6068-41DD-B70B-92F9CEFCBE0D}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe

FirewallRules: [{C8C8FD18-277E-4EC5-8732-75092B9A6B5E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe

FirewallRules: [{160D19D5-F4E2-42C1-9A25-84AA8602D0DF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe

FirewallRules: [{BCD5BB26-D294-4B55-ABED-61129A31042D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe

FirewallRules: [{0B868757-AD95-453D-804A-7C58F3130EB8}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe

FirewallRules: [{0FFE6FFE-1B2E-49D6-B241-7D9EE0A0AC2A}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe

FirewallRules: [{09F230DE-FD16-40BF-8D1B-21451044FCFC}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe

FirewallRules: [{A0B1A377-8AAD-4654-BD76-206F5780112B}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe

FirewallRules: [{F6CBEBB4-52E5-4B6E-B557-22AE0A2E6D99}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe

FirewallRules: [{765FA5B1-C84C-4356-9D0E-5A4676358FC6}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe

FirewallRules: [{BDDB9C39-9E48-4496-BCBB-5A11A6785CB8}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe

FirewallRules: [{261A5386-1D50-4B66-A547-6EDEDC94B7E6}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe

FirewallRules: [{104EBA7E-8002-4BC1-B747-99FEC1855208}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe

FirewallRules: [{BFCFA166-6961-468D-BF42-19600E7E74A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{66460F10-D899-4B67-9502-448750E3C1BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{7D31A398-299E-4238-A115-7064C6FC77B2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{D9498766-4271-421E-A905-0B4626EEF188}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{17BFEA5B-F773-46A3-9AC7-5DB543036DA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{2EC82D7A-2F76-4FD7-94A4-42788B88A07B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [TCP Query User{22869A74-478F-4AFA-A0C7-5F7997E3B04D}C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe

FirewallRules: [UDP Query User{C3F278BD-7EC5-40A0-8C42-DB4825452BC4}C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe

FirewallRules: [TCP Query User{EF81F3FF-3788-42A2-A28C-182A24DBA319}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe

FirewallRules: [UDP Query User{921FAA62-BD1F-4981-ABDB-EEAE7DEC7591}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe

FirewallRules: [{499758E5-2DAA-4524-8517-9E768B26FBC9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe

FirewallRules: [{26F684F9-961D-4A41-8F94-5C608C3D959C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Operation Arrowhead\DLCsetup\ACR\datacachepreprocessor.exe

FirewallRules: [{1ECE7BF6-3978-4027-8B0B-30D96A11E74C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{013836B5-D902-4B0D-8F0F-3D5547F8DC01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{BC35BEBA-BE68-40DF-9EE6-F3C89CC4C7C9}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{BE59E0EF-4F8F-4B0A-AAD3-FB3163641B3D}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{1B377AEA-F083-429E-AD50-57209CD26B67}] => (Allow) C:\Users\Angela\AppData\Roaming\Faceless LLC\Faceless Internet Connection\FacelessInternetConnection.exe

FirewallRules: [{686ABCF1-75EF-46D3-9B37-10D740A7282B}] => (Allow) C:\Users\Angela\AppData\Roaming\Faceless LLC\Faceless Internet Connection\FacelessInternetConnection.exe

FirewallRules: [{FD02229E-BA01-4FAF-81CD-35D6835FB88A}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{02B1F034-EBD6-428A-B98C-CA8FA457896E}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{D968B2E2-8104-4A94-8D6B-E515D31E63D7}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{57F3AC90-3241-48D3-A6CB-D44051950D49}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{B5712207-A55B-4269-9C6E-C61870238CFA}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe

FirewallRules: [{FD9EA07E-DFFE-4112-A878-8055C04F4D42}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe

FirewallRules: [TCP Query User{4A1C4193-C697-4A8E-BC95-1371600B2870}C:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe

FirewallRules: [UDP Query User{E9F04628-368E-4D4D-892A-FF5F7D7F933A}C:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe

FirewallRules: [TCP Query User{8C13154E-F76D-4447-A62E-362F74364B89}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{ADDE61EA-35CF-47DB-93A7-80B48DEA5409}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/08/2015 06:54:16 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: delegate_execute.exe, Version: 43.0.2357.132, Zeitstempel: 0x559b1e17

Name des fehlerhaften Moduls: delegate_execute.exe, Version: 43.0.2357.132, Zeitstempel: 0x559b1e17

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0002aac8

ID des fehlerhaften Prozesses: 0x15508

Startzeit der fehlerhaften Anwendung: 0xdelegate_execute.exe0

Pfad der fehlerhaften Anwendung: delegate_execute.exe1

Pfad des fehlerhaften Moduls: delegate_execute.exe2

Berichtskennung: delegate_execute.exe3

Vollständiger Name des fehlerhaften Pakets: delegate_execute.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: delegate_execute.exe5
 

Error: (07/08/2015 04:40:41 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)

Description: There was an error with the Windows Location Provider database
 

Error: (07/07/2015 09:43:16 PM) (Source: Chrome) (EventID: 1) (User: NT-AUTORITÄT)

Description: Chrome has encountered a fatal error.

ver=43.0.2357.130;lang=;guid=DCD5A8E48C89415A97174083C1812C58;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\1028d945-1a1f-40cf-8593-c2b29e67b69a.dmp
 

Error: (07/07/2015 01:46:05 AM) (Source: Chrome) (EventID: 1) (User: NT-AUTORITÄT)

Description: Chrome has encountered a fatal error.

ver=43.0.2357.130;lang=;guid=DCD5A8E48C89415A97174083C1812C58;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\382fd217-5fab-44c5-a8d7-72883b192a8c.dmp
 

Error: (07/06/2015 02:16:47 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
 

Error: (07/06/2015 02:16:02 PM) (Source: SideBySide) (EventID: 59) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Ungültige XML-Syntax.
 

Error: (07/06/2015 01:20:12 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/05/2015 06:43:45 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/04/2015 11:51:15 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/04/2015 01:24:30 AM) (Source: SideBySide) (EventID: 59) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Ungültige XML-Syntax.
 
 

System errors:

=============

Error: (07/08/2015 08:39:17 AM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
 

Error: (07/08/2015 08:32:48 AM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (07/08/2015 08:32:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/08/2015 08:32:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
 

Error: (07/08/2015 08:32:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/08/2015 08:32:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/08/2015 08:32:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (07/08/2015 08:32:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (07/08/2015 08:32:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (07/08/2015 08:32:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office:

=========================

Error: (07/08/2015 06:54:16 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: delegate_execute.exe43.0.2357.132559b1e17delegate_execute.exe43.0.2357.132559b1e17c00000050002aac81550801d0b939fa8ea226C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\delegate_execute.exeC:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\delegate_execute.exe6233422e-252d-11e5-beeb-54bef76ee358
 

Error: (07/08/2015 04:40:41 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)

Description: -2147024883
 

Error: (07/07/2015 09:43:16 PM) (Source: Chrome) (EventID: 1) (User: NT-AUTORITÄT)

Description: Chrome has encountered a fatal error.

ver=43.0.2357.130;lang=;guid=DCD5A8E48C89415A97174083C1812C58;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\1028d945-1a1f-40cf-8593-c2b29e67b69a.dmp
 

Error: (07/07/2015 01:46:05 AM) (Source: Chrome) (EventID: 1) (User: NT-AUTORITÄT)

Description: Chrome has encountered a fatal error.

ver=43.0.2357.130;lang=;guid=DCD5A8E48C89415A97174083C1812C58;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\382fd217-5fab-44c5-a8d7-72883b192a8c.dmp
 

Error: (07/06/2015 02:16:47 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestc:\program files (x86)\Adobe\adobe creative cloud\Utils\Creative Cloud Uninstaller.exe
 

Error: (07/06/2015 02:16:02 PM) (Source: SideBySide) (EventID: 59) (User: )

Description: C:\Program Files (x86)\Lucom\FormsForWeb\Filler3.2.3\xerces-c_2_8.dll.ManifestC:\Program Files (x86)\Lucom\FormsForWeb\Filler3.2.3\xerces-c_2_8.dll.Manifest6
 

Error: (07/06/2015 01:20:12 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/05/2015 06:43:45 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/04/2015 11:51:15 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80070005
 

Error: (07/04/2015 01:24:30 AM) (Source: SideBySide) (EventID: 59) (User: )

Description: C:\Program Files (x86)\Lucom\FormsForWeb\Filler3.2.3\xerces-c_2_8.dll.ManifestC:\Program Files (x86)\Lucom\FormsForWeb\Filler3.2.3\xerces-c_2_8.dll.Manifest6
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-03-21 20:48:31.920

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:31.738

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:31.534

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:31.245

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:31.031

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:30.836

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:30.659

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:30.431

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:30.194

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-03-21 20:48:30.027

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz

Percentage of memory in use: 40%

Total physical RAM: 8072.27 MB

Available physical RAM: 4764.07 MB

Total Virtual: 9352.27 MB

Available Virtual: 5508.67 MB
 

==================== Drives ================================
 

Drive c: (Acer) (Fixed) (Total:913.36 GB) (Free:705.92 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: D24AF841)
 

Partition: GPT Partition Type.
 

==================== End of log ============================

--- --- ---