moin erstmal,

ich habe ein schwerwiegendes problem was ich nach einigem suchen im internet nicht lösen kann.
änliche sachen wurde hier oft besprochen aber es war immer eine andere ausgangslage von anderen leuten als bei mir.

beim anmelden mit meinem benutzernamen in windows kommt nur ein schwarzer bildschirm mit mauszeiger. allerhand tastenkombinationen mit z.b. strg+ALT+entf kann man vergessen.

problem kam wiefolgt zustande:
also ich habe mir den bekannten adware trojaner "savesense" eingefangen. hab auch direkt lösungsmöglichkeiten im netz gefunden und durchgeführt.

habe 2 programme in der reiheinfolge installiert und durchgeführt: adwcleaner und Malwarebytes Anti-Malware. haben auch beide was gefunden und das wurde beim adwcleaner gleich gelöscht und bei Malwarebytes in die quarantäne verschoben.

dachte das problem wäre behoben doch jetzt ist es wesentlich schlimmer als vorher.

beim anschließenden neustart des lappies kam nach dem anmelden mit pw in windows einfach nur dieser schwarze bildschirm mit einem mauszeiger.

im abgesicherten modus kann ich normal starten und auch internet geht im netzwerkmodus. (so kann ich das übrigens hier posten xD)

leider hab ich keine wiederherstellungspunkte im system angelegt worüber ich mich jetzt sehr ärgere. die in die quarantäne verschobenen daten von savesense kann ich nicht wiederherstellen sondern nur löschen. das habe ich aber erstmal sein gelassen, wer weiß ob das dann nicht noch schlimmer wird. ich denke es muss an den dateien liegen die in die quarantäne verschoben wurden. wiederherstellen geht aber leider nicht. und wenn ich die sachen ganz lösche kann ich mir vorstellen das es noch schlimmer wird.

mein ereignisprotokoll zeigt folgendes an:

also irgendwas mit dem "service control manager". den abhängigen dienst habe ich bei msconfig gefunden und bei dem ist auf jedenfall der haken zum starten gesetzt

hoffe jemand hat eine idee wie man das problem lösen kann. am besten OHNE windows neu zu installieren.

danke für antworten im voraus

mfg

Stephan

Hi,

kannst DU den Taskmanager aufrufen wenn der Bildschirm schwarz ist? Wenn nicht dann im Safe Mode:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

erstmal danke für die schnelle antwort. den task manager kann ich nicht starten. mein system hat 64 bit hatte ich vergessen zu schreiben , habe natürlich die entsprechende datei runtergeladen und ausgeführt:

FRST:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Stjopa (administrator) on STJOPA-PC on 04-02-2014 11:44:27
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)



==================== Processes (Whitelisted) =================

(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\chrome.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-09-30] (Acer Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-24] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] - C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [159744 2007-05-07] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [UVS10 Preload] - C:\Program Files (x86)\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe [36864 2006-08-09] (Ulead Systems, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\Run: [Google Update] - C:\Users\Stjopa\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-21] (Google Inc.)
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S1].txt [1208 2014-02-03] ()
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_8_800_94_Plugin.exe [814984 2013-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\MountPoints2: E - E:\LaunchU3.exe -a
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\MountPoints2: {6c694e20-d0d6-11e1-9bf9-00262d66f7c0} - F:\autorun.exe
HKU\S-1-5-21-436902877-953191285-4115127654-1000\...\MountPoints2: {79d60c99-042b-11e2-9c8c-00262d66f7c0} - E:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: SaveSense - {71e129ff-6c2a-4984-818c-7e2c998b8d99} - C:\Users\Stjopa\AppData\Local\SaveSense\SaveSenseIE.dll (SaveSense)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.3.2

FireFox:
========
FF ProfilePath: C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default
FF Homepage: www.google.com
FF NetworkProxy: "http", "114.79.129.6"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Stjopa\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Stjopa\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash Video Downloader - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\artur.dubovoy@gmail.com [2014-01-26]
FF Extension: Extension_Protected - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack [2014-01-27]
FF Extension: [verify-U]-Add-on - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\verify-u_2@cybits.de [2013-02-21]
FF Extension: SaveSense - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-01-27]
FF Extension: billiger.de Sparberater - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\ciuvo-extension@billiger.de.xpi [2012-10-11]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\elemhidehelper@adblockplus.org.xpi [2012-07-19]
FF Extension: Free Games 111 - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\freegames4357@BestOffers.xpi [2014-01-03]
FF Extension: YouTube mp3 - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\info@youtube-mp3.org.xpi [2013-08-18]
FF Extension: Lightning Speed Dial - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-27]
FF Extension: Speed Test 127 - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\speedtest4354@BestOffers.xpi [2014-01-03]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF Extension: YouTube to MP3 - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\youtube2mp3@mondayx.de.xpi [2013-08-18]
FF Extension: Good Old YouTube Downloader - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\YoutubeDownloader@huangho.net76.net.xpi [2013-08-18]
FF Extension: Adblock Plus - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-07-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-07-18]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: Lightning Speed Dial - C:\Users\Stjopa\AppData\Roaming\Mozilla\Firefox\Profiles\d7npuga1.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-27]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Plugin: (Shockwave Flash) - C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\Stjopa\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-09-01]
CHR Extension: (Adblock Plus) - C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-12]
CHR Extension: (Google Wallet) - C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (Allin1Convert) - C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkanglmmnniiolknlhaajllgmlgcdkj [2014-01-27]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-12-20]
CHR HKLM-x32\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-27]

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-17] (Avira Operations GmbH & Co. KG)
S2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [101528 2007-04-13] ()
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2014-01-23] ()
S2 [verify-U]; C:\Program Files (x86)\[verify-U] AVS\[verify-U]-Service.exe [143360 2008-01-28] (Cybit AG)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 DAdderFltr; C:\Windows\System32\drivers\dadder.sys [13824 2007-04-12] (Razer (Asia-Pacific) Pte Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-07-18] (DT Soft Ltd)
R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [54848 2010-07-22] (FSPro Labs)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 StkTMini; C:\Windows\System32\Drivers\StkTMini.sys [528256 2007-11-15] (Syntek)
S1 [verify-U]_System; C:\Windows\SysWOW64\drivers\[verify-U]-driver.sys [16128 2007-11-07] (Cybits AG)
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-10-05] (CyberLink Corp.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-04 11:44 - 2014-02-04 11:44 - 00000000 ____D () C:\FRST
2014-02-03 14:54 - 2014-02-03 14:54 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 14:54 - 2014-02-03 14:54 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Malwarebytes
2014-02-03 14:53 - 2014-02-03 14:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 14:53 - 2014-02-03 14:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 14:53 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-03 14:46 - 2014-02-03 20:10 - 00000000 ____D () C:\AdwCleaner
2014-02-03 14:46 - 2014-02-03 14:45 - 01166132 ____N () C:\Users\Stjopa\Desktop\(3)adwcleaner-3.018.exe
2014-02-03 14:40 - 2014-02-03 14:36 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Stjopa\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-03 14:13 - 2014-02-03 14:27 - 00000000 ____D () C:\Micro sd
2014-02-02 20:05 - 2014-02-02 20:05 - 00000000 ____D () C:\Users\Stjopa\Desktop\Neuer Ordner (3)
2014-02-02 20:03 - 2014-02-02 20:03 - 00064981 _____ () C:\Users\Stjopa\Downloads\SGS3-Easy-UMS-v1.8.apk
2014-02-02 19:41 - 2014-02-02 20:38 - 00000000 ____D () C:\Users\Stjopa\Desktop\alles von der externen mit 22 ausnahmen wegen zu langem pfad
2014-02-02 19:21 - 2014-02-02 19:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-02-02 00:45 - 2014-02-03 19:54 - 00070730 _____ () C:\Windows\PFRO.log
2014-01-28 21:35 - 2014-02-04 10:30 - 00010757 _____ () C:\Windows\setupact.log
2014-01-28 21:35 - 2014-01-28 21:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-27 21:42 - 2014-01-27 22:05 - 00000000 ____D () C:\Users\Stjopa\Desktop\Setups
2014-01-27 21:25 - 2014-01-27 21:26 - 00000000 ____D () C:\Users\Stjopa\Desktop\Fachabi
2014-01-27 20:38 - 2014-01-27 20:38 - 00000000 ____D () C:\Users\Stjopa\Desktop\Programme zur Videobearbeitung
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\ProgramData\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Users\Stjopa\Documents\Any Video Converter
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\AnvSoft
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Program Files (x86)\AnvSoft
2014-01-27 18:47 - 2014-01-27 18:47 - 00003074 _____ () C:\Windows\System32\Tasks\{EE2EDA92-CA7A-43FA-8922-0262AF252046}
2014-01-27 18:42 - 2014-01-27 18:42 - 00000000 ____D () C:\Program Files (x86)\Ulead Systems
2014-01-27 18:27 - 2014-01-27 18:27 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\AskPartnerNetwork
2014-01-27 18:17 - 2014-01-27 18:17 - 00000000 ____D () C:\Users\Stjopa\Documents\Ulead VideoStudio SE
2014-01-27 18:15 - 2014-01-27 18:30 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Ulead Systems
2014-01-27 18:10 - 2014-01-27 18:10 - 00000000 ____D () C:\Program Files (x86)\Windows Media-Komponenten
2014-01-27 18:08 - 2014-01-27 18:42 - 00000000 ____D () C:\ProgramData\Ulead Systems
2014-01-27 18:05 - 2007-11-15 20:33 - 00528256 _____ (Syntek) C:\Windows\system32\Drivers\StkTMini.sys
2014-01-27 18:05 - 2007-10-06 17:03 - 00053248 _____ (Syntek America Inc.) C:\Windows\SysWOW64\StkTProp.ax
2014-01-27 18:05 - 2006-12-20 09:08 - 06921856 _____ (Syntek America Inc.) C:\Windows\system32\Drivers\StkCPipe.sys
2014-01-27 17:47 - 2014-01-27 17:48 - 00000378 _____ () C:\Windows\Tasks\APSnotifierCA.job
2014-01-27 17:47 - 2014-01-27 17:47 - 00003162 _____ () C:\Windows\System32\Tasks\APSnotifierCA
2014-01-27 17:43 - 2014-01-22 12:18 - 00824736 _____ (AnyProtect.com) C:\Users\Stjopa\AppData\Local\AnyProtectScannerSetup.exe
2014-01-27 17:41 - 2014-01-27 17:42 - 00000000 ____D () C:\Program Files (x86)\SearchProtect10083826
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\ProgramData\WPM
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\ProgramData\IePluginService
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-01-27 17:22 - 2014-02-03 19:48 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\DigitalSites
2014-01-27 17:22 - 2014-02-03 16:22 - 00000296 _____ () C:\Windows\Tasks\SaveSense.job
2014-01-27 17:22 - 2014-02-03 16:22 - 00000296 _____ () C:\Windows\Tasks\Digital Sites.job
2014-01-27 17:22 - 2014-02-02 18:22 - 00003240 _____ () C:\Windows\System32\Tasks\Digital Sites
2014-01-27 17:22 - 2014-02-02 18:22 - 00000212 _____ () C:\Users\Stjopa\AppData\Roaming\WB.CFG
2014-01-27 17:22 - 2014-02-01 00:54 - 00000005 _____ () C:\Users\Stjopa\AppData\Roaming\WBPU-TTL.DAT
2014-01-27 17:22 - 2014-02-01 00:22 - 00003240 _____ () C:\Windows\System32\Tasks\SaveSense
2014-01-27 17:22 - 2014-01-27 17:22 - 00003928 _____ () C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2014-01-27 17:22 - 2014-01-27 17:22 - 00003676 _____ () C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2014-01-27 17:22 - 2014-01-27 17:22 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\SaveSense
2014-01-27 17:20 - 2014-01-27 17:20 - 00667144 _____ () C:\Users\Stjopa\Downloads\ZipSetup.exe
2014-01-23 04:52 - 2014-01-23 04:52 - 00103736 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-23 04:52 - 2014-01-23 04:52 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-23 04:52 - 2014-01-23 04:52 - 00003330 _____ () C:\Windows\System32\Tasks\{B0A23B5F-4ACB-4625-B19D-89BE7A3B1610}
2014-01-23 03:52 - 2014-01-23 03:52 - 00000000 ____D () C:\Users\Stjopa\Documents\My Games
2014-01-23 03:52 - 2014-01-23 03:52 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\SKIDROW
2014-01-23 03:51 - 2014-01-23 03:51 - 00001748 _____ () C:\Users\Gast\Desktop\Counter-Strike Source.lnk
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{FF052B99-D6A6-4C69-9D1C-9A27DD5A641E}
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{46D0BB38-113A-41E2-8E7A-83D6FD643619}
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{1E104B4B-B1C8-405D-9922-FF7E4E90A27A}
2014-01-23 00:13 - 2014-01-23 00:13 - 00002940 _____ () C:\Windows\System32\Tasks\{83A0149C-7FA1-4D5C-836A-97DE2E824731}
2014-01-23 00:03 - 2014-01-23 00:24 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-01-22 22:00 - 2014-01-23 17:22 - 00000000 ____D () C:\Users\Stjopa\Desktop\Games Lan 22.01.14
2014-01-22 08:52 - 2014-01-22 08:52 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-01-13 22:31 - 2014-01-13 22:41 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Users\Stjopa\Documents\SoftMaker
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftMaker Viewer
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Program Files (x86)\SoftMaker Viewer
2014-01-13 22:30 - 2010-02-09 14:49 - 00779593 _____ () C:\Users\Stjopa\Documents\TextMaker Viewer.tmd
2014-01-13 22:30 - 2010-02-03 17:27 - 00068640 _____ () C:\Windows\unTMV.exe
2014-01-13 22:30 - 2010-02-03 17:01 - 00002885 _____ () C:\Users\Stjopa\Documents\Viewer-Liesmich.txt

==================== One Month Modified Files and Folders =======

2014-02-04 11:44 - 2014-02-04 11:44 - 00000000 ____D () C:\FRST
2014-02-04 11:44 - 2013-09-29 23:10 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Free Download Manager
2014-02-04 10:34 - 2012-07-18 14:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-04 10:34 - 2012-07-18 14:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-04 10:30 - 2014-01-28 21:35 - 00010757 _____ () C:\Windows\setupact.log
2014-02-04 10:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-03 20:59 - 2012-07-18 12:58 - 01408119 _____ () C:\Windows\WindowsUpdate.log
2014-02-03 20:10 - 2014-02-03 14:46 - 00000000 ____D () C:\AdwCleaner
2014-02-03 19:54 - 2014-02-02 00:45 - 00070730 _____ () C:\Windows\PFRO.log
2014-02-03 19:51 - 2013-04-26 17:12 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-03 19:48 - 2014-01-27 17:22 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\DigitalSites
2014-02-03 19:48 - 2012-07-18 15:24 - 00000000 ____D () C:\Users\Stjopa\Setups
2014-02-03 16:30 - 2013-04-26 17:12 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-03 16:22 - 2014-01-27 17:22 - 00000296 _____ () C:\Windows\Tasks\SaveSense.job
2014-02-03 16:22 - 2014-01-27 17:22 - 00000296 _____ () C:\Windows\Tasks\Digital Sites.job
2014-02-03 16:09 - 2012-08-21 14:17 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000UA.job
2014-02-03 14:58 - 2009-07-14 05:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-03 14:58 - 2009-07-14 05:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-03 14:57 - 2012-08-21 14:19 - 00001482 _____ () C:\Users\Stjopa\Desktop\Google Chrome.lnk
2014-02-03 14:57 - 2012-07-18 22:19 - 00697082 _____ () C:\Windows\system32\perfh007.dat
2014-02-03 14:57 - 2012-07-18 22:19 - 00148346 _____ () C:\Windows\system32\perfc007.dat
2014-02-03 14:57 - 2009-07-14 06:13 - 01613340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-03 14:54 - 2014-02-03 14:54 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-03 14:54 - 2014-02-03 14:54 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Malwarebytes
2014-02-03 14:54 - 2014-02-03 14:53 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-03 14:53 - 2014-02-03 14:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-03 14:48 - 2012-08-21 14:19 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-02-03 14:48 - 2012-07-18 12:58 - 00001001 _____ () C:\Users\Stjopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 14:45 - 2014-02-03 14:46 - 01166132 ____N () C:\Users\Stjopa\Desktop\(3)adwcleaner-3.018.exe
2014-02-03 14:36 - 2014-02-03 14:40 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Stjopa\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-03 14:27 - 2014-02-03 14:13 - 00000000 ____D () C:\Micro sd
2014-02-02 20:38 - 2014-02-02 19:41 - 00000000 ____D () C:\Users\Stjopa\Desktop\alles von der externen mit 22 ausnahmen wegen zu langem pfad
2014-02-02 20:05 - 2014-02-02 20:05 - 00000000 ____D () C:\Users\Stjopa\Desktop\Neuer Ordner (3)
2014-02-02 20:03 - 2014-02-02 20:03 - 00064981 _____ () C:\Users\Stjopa\Downloads\SGS3-Easy-UMS-v1.8.apk
2014-02-02 19:21 - 2014-02-02 19:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-02-02 18:32 - 2012-08-16 20:42 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\MediaMonkey
2014-02-02 18:22 - 2014-01-27 17:22 - 00003240 _____ () C:\Windows\System32\Tasks\Digital Sites
2014-02-02 18:22 - 2014-01-27 17:22 - 00000212 _____ () C:\Users\Stjopa\AppData\Roaming\WB.CFG
2014-02-01 00:54 - 2014-01-27 17:22 - 00000005 _____ () C:\Users\Stjopa\AppData\Roaming\WBPU-TTL.DAT
2014-02-01 00:22 - 2014-01-27 17:22 - 00003240 _____ () C:\Windows\System32\Tasks\SaveSense
2014-01-28 21:35 - 2014-01-28 21:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-27 22:08 - 2013-08-11 21:44 - 00000000 ____D () C:\Users\Stjopa\Desktop\usb stick 11.08.13
2014-01-27 22:05 - 2014-01-27 21:42 - 00000000 ____D () C:\Users\Stjopa\Desktop\Setups
2014-01-27 22:05 - 2012-07-18 12:57 - 00000000 ____D () C:\Users\Stjopa
2014-01-27 21:40 - 2013-12-17 19:02 - 00000000 ____D () C:\Users\Stjopa\profilbild spielerei
2014-01-27 21:26 - 2014-01-27 21:25 - 00000000 ____D () C:\Users\Stjopa\Desktop\Fachabi
2014-01-27 20:38 - 2014-01-27 20:38 - 00000000 ____D () C:\Users\Stjopa\Desktop\Programme zur Videobearbeitung
2014-01-27 20:27 - 2009-10-28 18:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\ProgramData\NCH Software
2014-01-27 20:07 - 2014-01-27 20:07 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Users\Stjopa\Documents\Any Video Converter
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\AnvSoft
2014-01-27 20:02 - 2014-01-27 20:02 - 00000000 ____D () C:\Program Files (x86)\AnvSoft
2014-01-27 19:00 - 2012-10-14 14:46 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\vlc
2014-01-27 18:47 - 2014-01-27 18:47 - 00003074 _____ () C:\Windows\System32\Tasks\{EE2EDA92-CA7A-43FA-8922-0262AF252046}
2014-01-27 18:42 - 2014-01-27 18:42 - 00000000 ____D () C:\Program Files (x86)\Ulead Systems
2014-01-27 18:42 - 2014-01-27 18:08 - 00000000 ____D () C:\ProgramData\Ulead Systems
2014-01-27 18:30 - 2014-01-27 18:15 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Ulead Systems
2014-01-27 18:28 - 2012-07-18 12:58 - 00000000 ___RD () C:\Users\Stjopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-27 18:27 - 2014-01-27 18:27 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\AskPartnerNetwork
2014-01-27 18:27 - 2012-11-23 15:01 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Opera
2014-01-27 18:27 - 2012-11-23 15:01 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\Opera
2014-01-27 18:27 - 2012-11-23 15:01 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-01-27 18:17 - 2014-01-27 18:17 - 00000000 ____D () C:\Users\Stjopa\Documents\Ulead VideoStudio SE
2014-01-27 18:15 - 2012-07-18 12:58 - 00098224 _____ () C:\Users\Stjopa\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-27 18:14 - 2009-07-14 05:45 - 00387952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-27 18:10 - 2014-01-27 18:10 - 00000000 ____D () C:\Program Files (x86)\Windows Media-Komponenten
2014-01-27 17:48 - 2014-01-27 17:47 - 00000378 _____ () C:\Windows\Tasks\APSnotifierCA.job
2014-01-27 17:47 - 2014-01-27 17:47 - 00003162 _____ () C:\Windows\System32\Tasks\APSnotifierCA
2014-01-27 17:42 - 2014-01-27 17:41 - 00000000 ____D () C:\Program Files (x86)\SearchProtect10083826
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\ProgramData\WPM
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\ProgramData\IePluginService
2014-01-27 17:23 - 2014-01-27 17:23 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-01-27 17:22 - 2014-01-27 17:22 - 00003928 _____ () C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
2014-01-27 17:22 - 2014-01-27 17:22 - 00003676 _____ () C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
2014-01-27 17:22 - 2014-01-27 17:22 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\SaveSense
2014-01-27 17:20 - 2014-01-27 17:20 - 00667144 _____ () C:\Users\Stjopa\Downloads\ZipSetup.exe
2014-01-23 17:22 - 2014-01-22 22:00 - 00000000 ____D () C:\Users\Stjopa\Desktop\Games Lan 22.01.14
2014-01-23 17:09 - 2012-08-21 14:17 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000Core.job
2014-01-23 04:52 - 2014-01-23 04:52 - 00103736 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-23 04:52 - 2014-01-23 04:52 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-23 04:52 - 2014-01-23 04:52 - 00003330 _____ () C:\Windows\System32\Tasks\{B0A23B5F-4ACB-4625-B19D-89BE7A3B1610}
2014-01-23 04:42 - 2012-08-16 22:28 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\PunkBuster
2014-01-23 03:52 - 2014-01-23 03:52 - 00000000 ____D () C:\Users\Stjopa\Documents\My Games
2014-01-23 03:52 - 2014-01-23 03:52 - 00000000 ____D () C:\Users\Stjopa\AppData\Local\SKIDROW
2014-01-23 03:51 - 2014-01-23 03:51 - 00001748 _____ () C:\Users\Gast\Desktop\Counter-Strike Source.lnk
2014-01-23 03:41 - 2012-07-18 15:55 - 00000000 ____D () C:\GAMES
2014-01-23 00:24 - 2014-01-23 00:03 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{FF052B99-D6A6-4C69-9D1C-9A27DD5A641E}
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{46D0BB38-113A-41E2-8E7A-83D6FD643619}
2014-01-23 00:14 - 2014-01-23 00:14 - 00002940 _____ () C:\Windows\System32\Tasks\{1E104B4B-B1C8-405D-9922-FF7E4E90A27A}
2014-01-23 00:13 - 2014-01-23 00:13 - 00002940 _____ () C:\Windows\System32\Tasks\{83A0149C-7FA1-4D5C-836A-97DE2E824731}
2014-01-22 12:18 - 2014-01-27 17:43 - 00824736 _____ (AnyProtect.com) C:\Users\Stjopa\AppData\Local\AnyProtectScannerSetup.exe
2014-01-22 08:52 - 2014-01-22 08:52 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-01-13 22:41 - 2014-01-13 22:31 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-01-13 22:32 - 2009-10-29 06:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Users\Stjopa\Documents\SoftMaker
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Users\Stjopa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftMaker Viewer
2014-01-13 22:30 - 2014-01-13 22:30 - 00000000 ____D () C:\Program Files (x86)\SoftMaker Viewer
2014-01-13 22:24 - 2012-10-22 18:37 - 00000000 ____D () C:\Users\Stjopa\Documents\IHG Aubsildungsnachweise
2014-01-06 01:21 - 2013-11-12 00:46 - 00017343 _____ () C:\Users\Stjopa\Documents\hk plan bis 03.14 neu.odt

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
C:\Users\Stjopa\AppData\Local\Temp\avgnt.exe
C:\Users\Stjopa\AppData\Local\Temp\BackupSetup.exe
C:\Users\Stjopa\AppData\Local\Temp\ICReinstall_nsl5F0.tmp.exe
C:\Users\Stjopa\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-02 17:53

==================== End Of Log ============================
         

--- --- ---

--- --- ---




Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by Stjopa at 2014-02-04 11:45:28
Running from C:\Downloads\Software
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

[verify-U] AVS 2.1.9 (x32 Version: 2.1.9 - :cybits: GmbH)
77zip (x32 Version:  - )
Acer Arcade Deluxe (x32 Version: 3.0.7006 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.0.7006 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.29 - NewTech Infosystems)
Acer Crystal Eye webcam Ver:1.1.74.216 (x32 Version: 1.1.74.216 - Chicony Electronics Co.,Ltd.)
Acer ePower Management (x32 Version: 4.05.3004 - Acer Incorporated)
Acer eRecovery Management (x32 Version: 4.05.3005 - Acer Incorporated)
Acer GridVista (x32 Version: 3.01.0730 - Acer Inc.)
Acer Registration (x32 Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.5.0715 - Acer Incorporated)
Acer Updater (x32 Version: 1.01.3017 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.4.402.265 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 10.0.923.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.873.0 - Advanced Micro Devices, Inc.)
ANNO 1602 Königs-Edition (x32 Version:  - )
Any Video Converter 5.5.2 (x32 Version:  - Any-Video-Converter.com)
Ashampoo Burning Studio 2012 v.10.0.15 (x32 Version: 10.0.15 - Ashampoo GmbH & Co. KG)
ATI AVIVO64 Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2948 - APN, LLC)
Backup Manager Basic (x32 Version: 2.0.0.29 - NewTech Infosystems) Hidden
Battlefield 2(TM) (x32 Version:  - )
Broadcom Gigabit NetLink Controller (Version: 12.26.02 - Broadcom Corporation)
Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision)
Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision) Hidden
Canon MP Navigator EX 1.0 (x32 Version:  - )
Canon MP210 series (Version:  - )
Canon MP210 series Benutzerregistrierung (x32 Version:  - )
Canon My Printer (Version:  - )
Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )
Canon Utilities Solution Menu (x32 Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help English (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help French (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help German (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0702.1239.20840 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0702.1239.20840 - ATI) Hidden
CCleaner (Version: 3.20 - Piriform)
Command & Conquer Alarmstufe Rot 2 (x32 Version:  - )
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6021.5000 - Microsoft Corporation)
Counter-Strike 1.6 (x32 Version: 1.00.0000 - )
Counter-Strike: Global Offensive (x32 Version:  - )
Counter-Strike: Source (x32 Version:  - Valve)
DAEMON Tools Lite (x32 Version: 4.45.4.0314 - DT Soft Ltd)
Dawn of War - Dark Crusade (x32 Version: 1.00.0000 - THQ)
Dota 2 (x32 Version:  - )
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Free Download Manager 3.9.3 (x32 Version:  - FreeDownloadManager.ORG)
Freemake Video Converter Version 3.2.1 (x32 Version: 3.2.1 - Ellora Assets Corporation)
FreeRIP 3.92 (x32 Version: 3.92 - GreenTree Applications SRL)
GameSpy Arcade (x32 Version:  - )
Google Chrome (HKCU Version: 32.0.1700.102 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Identity Card (x32 Version: 1.00.3002 - Acer Incorporated)
IePluginService12.27.0.3326 (x32 Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
IPTInstaller (x32 Version: 4.0.8 - HTC)
Java 7 Update 15 (64-bit) (Version: 7.0.150 - Oracle)
Java Auto Updater (x32 Version: 2.1.6.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 7 Update 5 (x32 Version: 7.0.50 - Oracle)
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Launch Manager (x32 Version: 3.0.05 - Acer Inc.)
LSI HDA Modem (Version: 2.1.94 - LSI Corporation)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaMonkey 4.0 (x32 Version: 4.0 - Ventis Media Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Age of Empires (x32 Version:  - )
Microsoft Age of Empires II (x32 Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (x32 Version:  - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (x32 Version: 9.7.0621 - Microsoft Corporation)
Minecraft 1.2.0_02 (x32 Version:  - )
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
My Lockbox 2.8.5 (Version: 2.8.5 - )
MyWinLocker (x32 Version: 3.1.76.0 - Egis Technology Inc.)
Need for Speed Underground 2 (x32 Version:  - )
NTI Backup Now 5 (x32 Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems) Hidden
OpenOffice.org 3.4 (x32 Version: 3.4.9590 - OpenOffice.org)
PIXMA Extended Survey Program (x32 Version:  - )
Prism Videodatei-Konverter (x32 Version: 2.02 - NCH Software)
Razer DeathAdder(TM) Mouse (x32 Version: 5.01 - Razer Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7100.30093 - Realtek Semiconductor Corp.)
ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
SpeedFan (remove only) (x32 Version:  - )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
SupTab (x32 Version: 1.1.1.0 - ) <==== ATTENTION
Synaptics Pointing Device Driver (Version: 14.0.6.0 - Synaptics Incorporated)
TextMaker Viewer (x32 Version:  - SoftMaker Software GmbH)
Tinypic 3.14 (x32 Version: Tinypic 3.14 - E. Fiedler)
Tom Clancy's Rainbow Six Vegas (x32 Version: 1.06.000 - Ubisoft)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.)
Ulead VideoStudio SE DVD (x32 Version: 10.0 - Ulead Systems)
USB2.0 ATV (x32 Version: 6.10.000.001 - Regulus)
Vietcong (x32 Version:  - )
VLC media player 1.1.4 (x32 Version: 1.1.4 - VideoLAN)
Welcome Center (x32 Version: 1.00.3008 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR archiver (x32 Version:  - )
Worms World Party (x32 Version:  - )

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {011EA98C-C947-43D8-BB28-271F9707C13C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000Core => C:\Users\Stjopa\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-21] (Google Inc.)
Task: {04906229-A893-4F9D-9B13-8F2C2B39A43B} - System32\Tasks\{AA2C8AB6-8B40-4D47-AAA2-70EAF55788A7} => C:\Users\Stjopa\Setups\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\setup.exe [2004-05-06] ()
Task: {196CC2F5-CDB2-4E3B-9AA9-D4C8B6539889} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000UA => C:\Users\Stjopa\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-21] (Google Inc.)
Task: {35F8CEA7-4E6B-402B-9843-6F4DD301AFA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-26] (Google Inc.)
Task: {397AB049-43DD-4F17-A2B7-2A8F6C68B52E} - System32\Tasks\{9DED75C4-7A94-4202-9E1E-0FBACFA537D3} => C:\Users\Stjopa\Setups\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol120_retail_1_9_2_1705\Alcohol120_retail_1_9_2_1705\setup.exe [2004-05-06] ()
Task: {423BB416-6C2A-4D1B-BCD4-3B072D6EB8BD} - System32\Tasks\{83A0149C-7FA1-4D5C-836A-97DE2E824731} => C:\Program Files (x86)\Valve\hl.exe [2003-12-12] (Valve)
Task: {58258FE0-2465-4EE7-B2F8-D39534D2EF4B} - System32\Tasks\Digital Sites => C:\Users\Stjopa\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {62F6F668-F3FF-4564-9D0E-3E39F5742AC4} - System32\Tasks\APSnotifierCA => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: {6DBB717E-E514-4AE5-B6E5-07CDC2A7165F} - System32\Tasks\{46D0BB38-113A-41E2-8E7A-83D6FD643619} => C:\Program Files (x86)\Valve\hl.exe [2003-12-12] (Valve)
Task: {7BB289B8-780B-4086-97F7-F65ED58F6553} - System32\Tasks\{0E5E7C9A-D637-4956-98E0-0AB4E18A1E43} => C:\Windows\system32\msiexec.exe [2010-11-20] (Microsoft Corporation)
Task: {7C906E41-E9A9-44AE-AD91-3B23EF08544D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-26] (Google Inc.)
Task: {8EB0032C-43ED-419E-8CB1-06C711CF83FD} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: {91C3DCBF-EFB1-4B0F-A29E-0BA72D7E5978} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-10-01] (Acer)
Task: {98A12052-A546-4FDF-AA98-2B2C05253208} - System32\Tasks\{73899066-DF82-4146-9856-1D3D157232F8} => C:\Users\Stjopa\Setups\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol120_retail_1_9_2_1705\Alcohol120_retail_1_9_2_1705\setup.exe [2004-05-06] ()
Task: {9BCD6EE3-7939-418E-AD7C-0B6AEE84B37A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-06-22] (Piriform Ltd)
Task: {AC6416FA-DA5A-4740-8B43-D315487717F0} - System32\Tasks\{FF052B99-D6A6-4C69-9D1C-9A27DD5A641E} => C:\Program Files (x86)\Valve\hl.exe [2003-12-12] (Valve)
Task: {B549370E-491B-43EA-A35A-48C4CCC3EA2F} - System32\Tasks\{1E104B4B-B1C8-405D-9922-FF7E4E90A27A} => C:\Program Files (x86)\Valve\hl.exe [2003-12-12] (Valve)
Task: {B5829CA9-9B67-43EA-BB80-397A236C7B73} - System32\Tasks\{A4E788EB-D401-4992-BEAF-E03CF27774B4} => C:\GAMES\Minecraft\Stjopa\AppData\Roaming\MinecraftSP.exe [2010-10-20] (AnjoCaido)
Task: {D1729AC6-5B4B-41FA-BB3A-92345D342AAF} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: {DBE426F5-AFD1-4601-ABFC-3B24162B3236} - System32\Tasks\SaveSense => C:\Users\Stjopa\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {FB42F6DF-6186-4289-873C-24EFC75C758F} - System32\Tasks\NCH Software\PrismSevenDays => C:\Program Files (x86)\NCH Software\Prism\Prism.exe [2013-08-20] (NCH Software)
Task: C:\Windows\Tasks\APSnotifierCA.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Stjopa\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000Core.job => C:\Users\Stjopa\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-436902877-953191285-4115127654-1000UA.job => C:\Users\Stjopa\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SaveSense.job => C:\Users\Stjopa\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-01-31 00:12 - 2014-01-23 06:56 - 04055320 _____ () C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-01-31 00:12 - 2014-01-23 06:57 - 00399640 _____ () C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
2014-01-31 00:12 - 2014-01-23 06:55 - 01634584 _____ () C:\Users\Stjopa\AppData\Local\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll
2014-02-03 20:36 - 2014-02-03 20:36 - 04591616 _____ () C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2014-02-03 20:36 - 2014-02-03 20:36 - 00112128 _____ () C:\Users\Stjopa\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll
2013-09-29 23:08 - 2013-09-20 07:49 - 03560960 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:4D066AD2

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\[verify-U] => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Video WebCam
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 10:34:54 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/04/2014 10:34:04 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/04/2014 10:34:04 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 08:44:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 08:44:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 08:27:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 08:27:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 07:54:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 07:54:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (02/03/2014 07:33:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


System errors:
=============
Error: (02/04/2014 11:45:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:45:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:45:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:43:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (02/04/2014 11:40:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (02/04/2014 10:34:54 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/04/2014 10:34:04 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/04/2014 10:34:04 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 08:44:50 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 08:44:50 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 08:27:25 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 08:27:25 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 07:54:47 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 07:54:47 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (02/03/2014 07:33:02 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8


==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 4090.93 MB
Available physical RAM: 3057.82 MB
Total Pagefile: 8180.04 MB
Available Pagefile: 7196.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:298.09 GB) (Free:68.71 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C817E0C5)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

so das war mir alles zu umständlich.
habe keine zeit gehabt auf eine antwort zu warten und windows einfach mit einer recovery dvd neu gemacht.

da war eh genug mist drauf, gut das alles runterzubekommen.

pc läuft jetzt wieder gut....aber danke für die hilfe.

thread kann geschlossen werden

ok.