Hallo!

Ich habe seit geraumer Zeit das Problem, dass urplötzlich der Sound von Werbung auf meinem Pc zu hören ist. Sei es deutsche Werbung wie "Erdinger Weißbier" oder ausländischer Kram. Es startet einfach so ohne Ankündigung und endet erst, wenn die Werbung zuende ist. Nun kam es seit Wochen nicht mehr, eben aber dann leider wieder...Ich hab den ABP Blocker an, keine popups sind offen. Nichts, was zumindest offensichtlich Werbung generieren würde. Ich weiß nicht, wie ich am besten dagegen vorgehen soll, da mir dieser Virus oder was auch immer es sein mag völlig neu ist. Mein Pc ist seit geraumer Zeit auch DEUTLICH langsamer als zuvor, der Lüfter arbeitet weitaus mehr. Ich weiß nicht, ob das auch damit einher geht. Sofern ihr da auch noch gute Tipps habt, den Pc zu entmüllen (ohne formatieren), wäre ich ebenfalls dankbar!

Vielen dank!

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2014
Ran by User (administrator) on USER-PC on 28-04-2014 18:59:45
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\puush\puush.exe
() C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hauppauge Computer Works, Inc.) C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Last.fm) C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Microsoft Corporation) C:\Windows\system32\SndVol.exe
() C:\Users\User\AppData\Local\Temp\~nsu.tmp\Au_.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Runonce: [FreeHideIPunstall] -  [X]
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [icq] => C:\Users\User\AppData\Roaming\ICQM\icq.exe [29919576 2013-11-20] (ICQ)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\MountPoints2: {09652e5b-2b87-11e0-a3c5-1c6f6557ec2e} - I:\autorun.exe
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\hpwucli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\icq.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\icqsetup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hauppauge Device Central Tray Tool.lnk
ShortcutTarget: Hauppauge Device Central Tray Tool.lnk -> C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe (Hauppauge Computer Works, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCA3BD068BAAACB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKCU - (No Name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No File
SearchScopes: HKCU - {66450212-1A2D-4DA6-8425-E1189261EAFE} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKCU - No Name - {1392B8D2-5C05-419F-A8F6-B9F15A596612} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Homepage: www.google.de
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ich@maltegoetz.de [2013-07-30]
FF Extension: YouTube to MP3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-11-30]
FF Extension: YouTube Video Download Wizard - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ytvdw@pgport.com.xpi [2011-05-08]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-04-08]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-07]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R4 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [291736 2012-09-11] (Hauppauge Computer Works, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [95896 2009-04-26] (SiSoftware)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2027840 2011-07-15] (TuneUp Software)
S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 Ati External Event Utility; %SystemRoot%\system32\Ati2evxx.exe [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-01-29] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-24] ()
S3 hcwE5bda; C:\Windows\System32\drivers\hcwE5bda.sys [968792 2014-01-07] (Hauppauge Computer Work, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-11-29] (TuneUp Software)
S3 cpuz130; \??\C:\Users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-28 18:59 - 2014-04-28 19:00 - 00017630 _____ () C:\Users\User\Desktop\FRST.txt
2014-04-28 18:55 - 2014-04-28 18:59 - 00000000 ____D () C:\FRST
2014-04-28 18:51 - 2014-04-28 18:51 - 02061824 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-24 12:15 - 2014-04-25 01:12 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 16:27 - 2014-04-22 16:42 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-21 14:40 - 2014-04-24 16:37 - 00000000 ____D () C:\Users\User\Desktop\Unisonic (DE)
2014-04-21 11:22 - 2014-04-21 11:22 - 00000000 ____D () C:\Users\User\Desktop\Twilight Force (SWE)
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2012-08-21 17:24 - 12935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll
2014-04-19 17:44 - 2012-08-14 18:24 - 00820224 ____N () C:\Windows\system32\Cmeau108.exe
2014-04-19 17:44 - 2012-06-05 12:56 - 00143360 ____N () C:\Windows\Vmix108.dll
2014-04-19 17:44 - 2012-06-03 17:15 - 04533760 ____N () C:\Windows\system32\CM108.cpl
2014-04-19 17:44 - 2006-09-12 13:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\cmpa108.dll
2014-04-19 17:39 - 2014-04-19 17:44 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:39 - 2012-12-05 19:29 - 00002603 ____N () C:\Windows\Cm108.ini.cfg
2014-04-19 17:39 - 2012-09-20 16:36 - 04326912 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\CM10864.sys
2014-04-19 17:39 - 2012-09-03 19:58 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltr108.dll
2014-04-19 17:39 - 2009-08-18 04:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-04-19 17:39 - 2006-10-04 17:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-04-18 19:32 - 2014-04-18 19:44 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 12:57 - 2014-04-18 13:01 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-18 00:58 - 2009-06-14 22:36 - 00000000 ____D () C:\Users\User\Desktop\Audiosurf
2014-04-16 18:15 - 2014-04-16 18:23 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:04 - 2014-04-14 15:16 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:14 - 2014-04-12 21:20 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-12 21:09 - 2014-04-12 21:13 - 00000000 ____D () C:\Users\User\Desktop\BOGUSLAW BALCERAK'S - Gates Of Valhalla
2014-04-10 19:46 - 2014-04-13 15:50 - 00000000 ____D () C:\Users\User\Desktop\AMBERIAN DAWN - Magic Forest
2014-04-10 17:10 - 2014-04-25 19:36 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-09 11:34 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 11:34 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 19273728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 06:57 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 11:34 - 2014-03-13 06:47 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 11:33 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 11:33 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-09 11:33 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 11:33 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-09 11:32 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 11:32 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 11:32 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 11:32 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 11:32 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 11:32 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 11:32 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 11:32 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 11:32 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 15:13 - 2014-04-08 15:13 - 00000000 ____D () C:\Users\User\AppData\Local\{CBC9DBF7-306C-44A5-A769-2CF868DE2F21}
2014-04-07 14:43 - 2014-04-07 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-01-07 14:36 - 00968792 _____ (Hauppauge Computer Work, Inc.) C:\Windows\system32\Drivers\hcwE5bda.sys
2014-04-07 14:35 - 2014-01-07 14:26 - 00126464 _____ (Hauppauge Computer Works Inc.) C:\Windows\system32\hcwE5prx.ax
2014-04-07 14:35 - 2014-01-07 14:25 - 00127488 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwE5prx.ax
2014-04-07 14:35 - 2013-05-06 05:36 - 04063232 _____ () C:\Windows\system32\Drivers\HcwE5ENC_t22_24.bin
2014-04-07 14:35 - 2013-05-06 05:36 - 02359296 _____ () C:\Windows\system32\Drivers\HcwE5CPU_MIPS.bin
2014-04-07 14:35 - 2013-02-05 10:39 - 00046080 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwD1ep.ax
2014-04-07 14:35 - 2013-02-05 10:39 - 00042496 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwD1ep.ax
2014-04-07 14:34 - 2014-04-07 14:35 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:30 - 2014-04-07 14:36 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-03-26 11:46 - 00330568 _____ (Hauppauge, Inc.) C:\Windows\SysWOW64\hcwhdpvr.ax
2014-04-07 14:30 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32_priv.dll
2014-04-07 14:29 - 2006-09-18 08:50 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:24 - 2007-04-19 09:39 - 00256768 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLURT.dll
2014-04-07 14:24 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2014-04-07 14:24 - 2005-05-28 06:58 - 00393216 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLUP60.dll
2014-04-07 14:23 - 2014-04-07 14:36 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:23 - 2013-04-17 15:05 - 00323640 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2014-04-07 14:23 - 2012-05-18 17:03 - 00118840 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2014-04-07 14:23 - 2009-02-16 23:09 - 00831554 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2014-04-07 14:23 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2014-04-07 14:14 - 2014-04-07 14:36 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:14 - 2006-09-08 13:40 - 00139264 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwECPPP.ax
2014-04-07 14:14 - 2006-09-08 13:40 - 00096256 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwCP.ax
2014-04-07 14:14 - 2006-08-15 16:21 - 00146432 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwECPPP.ax
2014-04-07 14:14 - 2006-08-15 16:20 - 00098304 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwCP.ax
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-06 15:52 - 2014-04-06 15:51 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 11:06 - 2014-04-04 11:06 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\GPU Z - CHIP-Downloader.exe
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-03 13:20 - 2014-04-03 13:20 - 00000000 ____D () C:\Users\User\AppData\Local\{D88AAB48-2B7F-44D7-B519-4C38F853FB59}
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp
2014-04-02 16:19 - 2014-04-02 16:20 - 00000000 ____D () C:\Users\User\AppData\Local\{DB5062C4-1D46-4648-A3C2-B4EA3707A81A}
2014-04-01 00:27 - 2014-04-01 00:27 - 00000000 ____D () C:\Users\User\Desktop\Free Spirit EPK

==================== One Month Modified Files and Folders =======

2014-04-28 19:00 - 2014-04-28 18:59 - 00017630 _____ () C:\Users\User\Desktop\FRST.txt
2014-04-28 19:00 - 2011-01-03 00:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-04-28 18:59 - 2014-04-28 18:55 - 00000000 ____D () C:\FRST
2014-04-28 18:51 - 2014-04-28 18:51 - 02061824 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-28 18:33 - 2012-04-15 09:41 - 01750637 _____ () C:\Windows\WindowsUpdate.log
2014-04-28 18:06 - 2011-01-22 00:09 - 00003768 _____ () C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2014-04-28 17:44 - 2012-04-15 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-28 17:43 - 2012-04-15 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 17:43 - 2012-04-15 10:03 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-04-28 17:42 - 2011-08-06 19:34 - 00000000 ____D () C:\Program Files (x86)\Zattoo4
2014-04-28 17:38 - 2011-10-13 01:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-04-28 17:38 - 2011-10-13 00:59 - 00000000 ____D () C:\AeriaGames
2014-04-28 17:36 - 2013-03-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-04-28 15:15 - 2011-01-03 00:42 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-04-28 14:50 - 2013-06-22 13:38 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2014-04-28 14:50 - 2012-08-04 15:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spotify
2014-04-28 14:19 - 2012-08-04 15:55 - 00000000 ____D () C:\Users\User\AppData\Local\Spotify
2014-04-28 10:32 - 2011-01-03 00:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-04-28 10:10 - 2013-03-20 11:19 - 00000412 _____ () C:\Windows\Tasks\PC Optimizer Pro64 startups.job
2014-04-28 06:35 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-28 06:35 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-28 06:28 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-27 12:24 - 2013-02-03 19:43 - 00000000 ____D () C:\Users\User\Desktop\new stuff
2014-04-25 19:36 - 2014-04-10 17:10 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-25 01:12 - 2014-04-24 12:15 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-24 16:37 - 2014-04-21 14:40 - 00000000 ____D () C:\Users\User\Desktop\Unisonic (DE)
2014-04-22 23:22 - 2011-01-03 19:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-22 16:42 - 2014-04-22 16:27 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-21 11:22 - 2014-04-21 11:22 - 00000000 ____D () C:\Users\User\Desktop\Twilight Force (SWE)
2014-04-20 18:58 - 2012-04-15 09:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-04-20 15:25 - 2013-11-04 02:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-04-19 18:45 - 2011-02-09 00:24 - 00000000 ___RD () C:\Users\User\Desktop\mucke unso
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2014-04-19 17:39 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-19 17:39 - 2013-12-18 12:49 - 00001113 _____ () C:\Windows\system\Cm108.ini
2014-04-18 19:44 - 2014-04-18 19:32 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 13:01 - 2014-04-18 12:57 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-16 18:23 - 2014-04-16 18:15 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:16 - 2014-04-14 15:04 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-14 14:34 - 2011-07-02 22:37 - 00008904 _____ () C:\Users\User\Desktop\ygo.txt
2014-04-13 15:50 - 2014-04-10 19:46 - 00000000 ____D () C:\Users\User\Desktop\AMBERIAN DAWN - Magic Forest
2014-04-12 21:20 - 2014-04-12 21:14 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-12 21:13 - 2014-04-12 21:09 - 00000000 ____D () C:\Users\User\Desktop\BOGUSLAW BALCERAK'S - Gates Of Valhalla
2014-04-11 11:20 - 2012-04-15 11:07 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 11:19 - 2013-06-29 11:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-11 11:19 - 2013-06-29 11:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-11 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 10:07 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-10 01:55 - 2011-01-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 01:53 - 2013-08-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 01:50 - 2011-01-02 22:14 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 15:46 - 2012-11-30 14:11 - 00000000 ____D () C:\Users\User\Desktop\Ich
2014-04-08 15:13 - 2014-04-08 15:13 - 00000000 ____D () C:\Users\User\AppData\Local\{CBC9DBF7-306C-44A5-A769-2CF868DE2F21}
2014-04-07 19:55 - 2014-04-07 14:43 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:36 - 2014-04-07 14:30 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:36 - 2014-04-07 14:23 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:36 - 2014-04-07 14:14 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-04-07 14:34 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:35 - 2014-04-07 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-04-15 09:52 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-07 12:32 - 2009-07-14 19:58 - 02325536 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 12:32 - 2009-07-14 19:58 - 00654144 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 12:32 - 2009-07-14 07:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 15:51 - 2014-04-06 15:52 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 11:06 - 2014-04-04 11:06 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\GPU Z - CHIP-Downloader.exe
2014-04-04 10:57 - 2012-10-13 14:55 - 00000000 ____D () C:\Users\User\Desktop\rec
2014-04-04 10:57 - 2012-03-28 17:38 - 00000000 ____D () C:\Users\User\Desktop\Medleys
2014-04-04 10:55 - 2014-03-01 14:14 - 00000000 ____D () C:\Users\User\Desktop\winter season
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 18:27 - 2011-05-16 19:54 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-03 13:20 - 2014-04-03 13:20 - 00000000 ____D () C:\Users\User\AppData\Local\{D88AAB48-2B7F-44D7-B519-4C38F853FB59}
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp
2014-04-02 16:20 - 2014-04-02 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\{DB5062C4-1D46-4648-A3C2-B4EA3707A81A}
2014-04-01 00:27 - 2014-04-01 00:27 - 00000000 ____D () C:\Users\User\Desktop\Free Spirit EPK
2014-03-30 00:11 - 2014-03-12 22:48 - 00176128 _____ (Scendix Software-Vertriebsges. mbH) C:\Windows\SysWOW64\RemoteControl.dll
2014-03-29 14:56 - 2014-03-20 03:26 - 00083305 _____ () C:\Users\User\Desktop\kiri.aup
2014-03-29 11:27 - 2013-03-08 11:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

ZeroAccess:
C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30}

ZeroAccess:
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-19 09:04

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2014
Ran by User at 2014-04-28 19:01:11
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.08 - GIGABYTE)
[PS3] Save Resigner (HKLM-x32\...\[PS3] Save Resigner 2.0.2) (Version: 2.0.2 - The Prince of Codes)
[PS3] Save Resigner (x32 Version: 2.0.2 - The Prince of Codes) Hidden
µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30416 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{CCE825DB-347A-4004-A186-5F4A6FDD8547}) (Version: 2.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}) (Version: 6.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft ShowBiz Update (HKLM-x32\...\{4653DA78-3DB2-4F38-A35D-675CA0AF49CA}) (Version: 3.5.41.83 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{91DE36DA-9DE8-0CE8-AE5A-884735889FF6}) (Version: 3.0.715.0 - ATI Technologies, Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
AVS Audio Recorder version 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.1.21 - Online Media Technologies Ltd.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CameraHelperMsi (x32 Version: 13.31.1038.0 - Logitech) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.0721.1107.18080 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help English (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help French (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help German (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.0721.1106.18080 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0721.1107.18080 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0721.1107.18080 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.0.2838 - CDBurnerXP)
Copy (x32 Version: 130.0.366.000 - Hewlett-Packard) Hidden
CuteFTP 8 Home (HKLM-x32\...\{949DBB22-2FB7-4de1-804C-23D495A988D8}) (Version: 8.3.1 - GlobalSCAPE)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.40.2.0131 - DT Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{AC53C6A4-1CC4-48A5-91F3-565BB7978B22}) (Version:  - Microsoft)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
Diablo II (HKLM-x32\...\Diablo II) (Version:  - Blizzard Entertainment)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)
DJ_AIO_06_F2400_SW_Min (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
DriverMax 7 (HKLM-x32\...\DMX5_is1) (Version: 7.29.0.225 - Innovative Solutions)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
F2400 (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Free IP Switcher (HKLM-x32\...\Free IP Switcher) (Version: hxxp://www.eusing.com/ipswitch/free_ip_switcher.htm - Eusing Software)
Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)
Freecorder 7 Applications (7.0.0.48) (HKLM-x32\...\Freecorder 7 Applications) (Version: 7.0.0.48 - Applian Technologies)
Freemake Video Converter Version 4.0.1 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.0.1 - Ellora Assets Corporation)
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
GIMP 2.6.8 (HKLM\...\WinGimp-2.0_is1) (Version:  - )
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hauppauge Device Central (HKLM-x32\...\Hauppauge Device Central) (Version: 1.0.30254 - Hauppauge Computer Works, Inc.)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6 (HKLM\...\{CDBF8C2D-04B0-4F9B-9AE1-7422F7F0EC94}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
hpPrintProjects (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
ICQ 8.2 (build 6870) (HKCU\...\ICQ) (Version: 8.2.6870.0 - Mail.Ru)
ILLUSION Sexy Beach ZERO (HKLM-x32\...\{19661D1F-932A-4845-A562-10907870E8D1}_is1) (Version: 1.0.0.0 - randompirate)
Ipswitch WS_FTP 12 (HKLM-x32\...\{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}) (Version: 12.3 - Ipswitch)
iTunes (HKLM\...\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}) (Version: 11.0.1.12 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\1489-3350-5074-6281) (Version: 0.9 - AppWork GmbH)
LAME v3.98.3 for Audacity (HKLM-x32\...\LAME for Audacity_is1) (Version:  - )
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)
LWS Facebook (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS Help_main (x32 Version: 13.31.1044.0 - Logitech) Hidden
LWS Launcher (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS Motion Detection (x32 Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (x32 Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Junior (HKLM-x32\...\{F1191B7E-84BF-4325-9FFD-80BD8996ED4B}) (Version: 2.7.5 - Screaming Bee)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
MP3 Skype recorder (HKLM-x32\...\{2950ED4F-18AD-4571-9045-27D6EBF62320}) (Version: 4.3.0.0 - Alexander Nikiforov)
Mp3tag v2.58 (HKLM-x32\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
MPC-HC 1.7.1 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.1.0 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
ON_OFF Charge B10.0427.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Pam Call Recorder 4.8 (HKLM-x32\...\PamelaCR) (Version: 4.8 - Scendix Software-Vertriebsges. mbH)
Pamela Pro 4.8 (HKLM-x32\...\Pamela) (Version: 4.8 - Scendix Software-Vertriebsges. mbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.0 - Frank Heindörfer, Philip Chinery)
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
Play MPE Player 4.0 (HKLM-x32\...\Play MPE Player 4.0) (Version: 4.0.99.230 - Destiny Software Productions Inc.)
Protect Disc License Helper 1.0.118 (HKLM-x32\...\Protect Disc License Helper) (Version: 1.0.118 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.11 - ProtectDisc Software GmbH)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.18.322.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
SADES 7.1 SOUND EFFECT GAMING HEADSET (HKLM\...\C-Media CM108 Like Sound Driver) (Version:  - )
SADES 7.1 SOUND EFFECT GAMING HEADSET (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006300}) (Version: 1.00.0001 - )
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Sexy Beach 3 - Complete English Edition (remove only) (HKLM-x32\...\Sexy Beach 3 - Complete English Edition) (Version:  - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SiSoftware Sandra Lite 2012.SP4 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 18.45.2012.6 - SiSoftware)
Skins (x32 Version: 2009.0721.1107.18080 - ATI) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spotify (HKCU\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
SZS Modifier (HKLM-x32\...\{F6D8F2FE-B9BE-4C7C-98F2-2954B5A26AF2}) (Version: 2.5.2 - ChadSoft)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.10 - TeamSpeak Systems GmbH)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version:  - Nadeo)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
TuneUp Utilities 2011 (HKLM-x32\...\TuneUp Utilities 2011) (Version: 10.0.4310.8 - TuneUp Software)
TuneUp Utilities 2011 (x32 Version: 10.0.4310.8 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4310.8 - TuneUp Software) Hidden
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{428CB7A0-1068-4CE1-8835-39C7ECD297ED}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0409-1000-0000000FF1CE}_Office14.PROPLUS_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0D79FC87-AC76-4500-AAB5-BCD9DCA8A7F6} - System32\Tasks\17551900 => C:\Users\User\AppData\Local\Temp\\setup32392256.exe <==== ATTENTION
Task: {1EC15557-EC04-492E-A92C-1F8734422A09} - System32\Tasks\{C6D2C030-6DB5-42AC-8C36-05216FC8A587} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-02-10] (Skype Technologies S.A.)
Task: {42C703AD-9DBF-48FD-837F-A61E7D6AB0E7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {501FB932-6B1C-41E9-9AB5-07ED8D2F8FA5} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {98928B8A-F522-4A5E-A39A-6FEC190B4FDC} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {A161EEA7-FB4A-4A72-AB01-1A373F9F7F9B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {A64CC879-AC91-4FCA-B471-58A6958D16CA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2011-07-15] (TuneUp Software)
Task: {B72CECA4-C4FD-4B40-9D87-3E22B46BDD5A} - \DealPly No Task File <==== ATTENTION
Task: {B7EEDDC6-138C-4DEF-BA20-2C34D8237804} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08] (Hewlett-Packard)
Task: {BAC47FAF-48C3-4F82-A813-88BEA1F6CB7E} - System32\Tasks\Google Updater and Installer => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {D48EEAD7-246F-4E0B-8EE2-0B60307FCD0C} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION
Task: {DE46B6F1-3DBD-46DB-96B0-C65927CEF6FD} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {E32376EF-E5E1-4AB7-BA4E-4FB19087A781} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\PC Optimizer Pro64 startups.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2010-01-09 21:17 - 2010-01-09 21:17 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 02:40 - 2010-01-21 02:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-01-04 19:19 - 2010-09-28 17:03 - 06619256 _____ () C:\Program Files\ipswitch\WS_FTP 12\res0407.dll
2011-01-03 01:12 - 2010-03-15 12:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2012-01-10 14:41 - 2013-07-14 19:33 - 00567880 _____ () C:\Program Files (x86)\puush\puush.exe
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2012-04-15 09:59 - 2012-04-15 09:59 - 00014848 _____ () C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
2008-11-25 10:19 - 2008-11-25 10:19 - 01193472 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Implementation\64\wbocx.ocx
2014-04-28 17:36 - 2011-08-06 19:35 - 00049836 _____ () C:\Users\User\AppData\Local\Temp\~nsu.tmp\Au_.exe
2013-04-19 12:11 - 2013-01-25 09:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2010-01-09 21:18 - 2010-01-09 21:18 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 02:34 - 2010-01-21 02:34 - 08793952 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2014-04-28 10:32 - 2014-04-28 10:32 - 00010752 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\auth.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00069120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\burnlib.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00025088 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\dsp_sc.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00013824 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\dsp_sps.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006656 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_fhgaac.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004096 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_flac.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005632 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_lame.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004096 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_vorbis.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004096 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_wav.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006144 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\enc_wma.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00023552 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_classicart.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00007168 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_crasher.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00023040 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_ff.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00012288 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_hotkeys.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00041984 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_jumpex.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00022528 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_ml.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00009728 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_nopro.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00011776 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_skinmanager.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00010240 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_timerestore.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00008192 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_tray.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00010752 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\gen_undo.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_avi.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00014848 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_cdda.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006656 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_dshow.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005632 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_flac.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_flv.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_linein.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00020480 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_midi.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004608 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_mkv.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00018432 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_mod.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00023040 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_mp3.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_mp4.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00011776 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_nsv.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_swf.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00011264 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_vorbis.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006656 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_wav.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005632 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_wave.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00015360 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_wm.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004608 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\in_wv.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_addons.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006656 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_autotag.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_bookmarks.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00024064 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_cloud.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00008192 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_devices.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00047616 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_disc.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00009728 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_downloads.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004608 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_enqplay.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00009728 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_history.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_impex.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00056320 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_local.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_nowplaying.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00014336 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_online.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00017408 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_playlists.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00034816 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_plg.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00055296 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_pmp.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00005120 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_rg.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00008192 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_transcode.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00015360 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ml_wire.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00036352 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\ombrowser.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006144 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\out_disk.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00016384 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\out_ds.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00007680 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\out_wave.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003072 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\playlist.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004608 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_activesync.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00019968 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_android.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00007680 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_cloud.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00036864 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_ipod.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00003584 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_njb.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004096 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_p4s.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00011776 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_usb.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00039936 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\pmp_wifi.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00006144 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\tagz.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00088064 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\vis_avs.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00155648 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\vis_milk2.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00007680 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\vis_nsfs.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00211456 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\winamp.lng
2014-04-28 10:32 - 2014-04-28 10:32 - 00004096 _____ () C:\Users\User\AppData\Local\Temp\WDEDD29.tmp\winampa.lng
2013-07-24 00:57 - 2013-07-24 00:57 - 00340992 _____ () C:\Program Files (x86)\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
2013-01-16 14:43 - 2013-09-03 14:01 - 00736768 _____ () C:\Program Files (x86)\Last.fm\unicorn.dll
2013-01-16 14:43 - 2013-09-03 14:01 - 00032768 _____ () C:\Program Files (x86)\Last.fm\logger.dll
2013-01-16 14:43 - 2013-09-03 10:54 - 00351232 _____ () C:\Program Files (x86)\Last.fm\lastfm.dll
2013-01-16 14:43 - 2013-09-03 14:01 - 00126976 _____ () C:\Program Files (x86)\Last.fm\listener.dll
2013-01-16 14:43 - 2013-01-18 12:39 - 00302592 _____ () C:\Program Files (x86)\Last.fm\phonon.dll
2013-09-04 11:56 - 2013-01-18 12:49 - 00182784 _____ () C:\Program Files (x86)\Last.fm\plugins\phonon_backend\phonon_vlc.dll
2013-01-16 14:43 - 2012-12-13 01:12 - 00111104 _____ () C:\Program Files (x86)\Last.fm\libvlc.dll
2013-01-16 14:43 - 2012-12-13 01:13 - 02286592 _____ () C:\Program Files (x86)\Last.fm\libvlccore.dll
2013-09-04 11:56 - 2012-12-13 01:13 - 00049664 _____ () C:\Program Files (x86)\Last.fm\plugins\audio_output\libaout_directx_plugin.dll
2012-01-04 19:19 - 2010-09-28 16:53 - 00948496 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\LIBEAY32.dll
2012-01-04 19:19 - 2010-09-28 16:53 - 00153360 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\SSLEAY32.dll
2013-12-12 17:53 - 2014-03-29 11:27 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-11 11:19 - 2014-04-11 11:19 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: HcwDevCentralService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: UMVPFSrv => 2
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Cm108Sound => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
MSCONFIG\startupreg: DriverMax_RESTART => "C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe" -RESTART
MSCONFIG\startupreg: puush => C:\Program Files (x86)\puush\puush.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/28/2014 07:01:19 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 07:01:19 PM) (Source: VSS) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} und dem Namen "SW_PROV" kann nicht gestartet werden. [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
]


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 06:06:42 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 06:06:42 PM) (Source: VSS) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} und dem Namen "SW_PROV" kann nicht gestartet werden. [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
]


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/27/2014 06:58:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (04/27/2014 06:58:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (04/27/2014 06:57:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (04/25/2014 05:16:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (04/25/2014 05:16:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (04/25/2014 05:16:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (04/28/2014 05:03:51 PM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "DHCP-Client" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sicherheitscenter" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TCP/IP-NetBIOS-Hilfsdienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 100 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Ereignisprotokoll" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DHCP-Client" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 05:01:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Audio" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/28/2014 06:27:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (04/27/2014 06:23:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (04/26/2014 10:39:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (04/28/2014 07:01:19 PM) (Source: VSS)(User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 07:01:19 PM) (Source: VSS)(User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}SW_PROV0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 06:06:42 PM) (Source: VSS)(User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/28/2014 06:06:42 PM) (Source: VSS)(User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}SW_PROV0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.


Vorgang:
   Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
   Schnittstellen für alle Anbieter auflisten, die diesen Kontext unterstützen
   Schattenkopien abfragen

Kontext:
   Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Klassen-ID: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}
   Snapshotkontext: 13
   Snapshotkontext: 13
   Ausführungskontext: Coordinator

Error: (04/27/2014 06:58:05 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_skypenotify.dll

Error: (04/27/2014 06:58:05 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_messengernotify.dll

Error: (04/27/2014 06:57:37 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe

Error: (04/25/2014 05:16:41 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_skypenotify.dll

Error: (04/25/2014 05:16:41 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_messengernotify.dll

Error: (04/25/2014 05:16:13 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe


CodeIntegrity Errors:
===================================
  Date: 2013-06-24 13:08:04.970
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:08:04.574
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:07:46.960
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:07:46.621
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:53.172
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:52.808
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:33.768
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:33.439
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:20.893
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-24 13:04:20.526
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 86%
Total physical RAM: 1789.55 MB
Available physical RAM: 243.49 MB
Total Pagefile: 4214.2 MB
Available Pagefile: 1708.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:388 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: AD4D2F58)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 14-04-29.01 - User 29.04.2014  18:38:14.1.3 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.1790.228 [GMT 2:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Public\sdelevURL.tmp
c:\users\User\4.0
c:\users\User\AppData\Local\Temp\WDE8955.tmp\auth.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\burnlib.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\dsp_sc.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\dsp_sps.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_fhgaac.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_flac.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_lame.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_vorbis.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_wav.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\enc_wma.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_classicart.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_crasher.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_ff.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_hotkeys.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_jumpex.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_ml.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_nopro.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_skinmanager.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_timerestore.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_tray.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\gen_undo.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_avi.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_cdda.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_dshow.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_flac.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_flv.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_linein.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_midi.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_mkv.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_mod.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_mp3.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_mp4.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_nsv.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_swf.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_vorbis.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_wav.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_wave.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_wm.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\in_wv.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_addons.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_autotag.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_bookmarks.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_cloud.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_devices.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_disc.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_downloads.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_enqplay.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_history.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_impex.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_local.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_nowplaying.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_online.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_playlists.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_plg.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_pmp.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_rg.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_transcode.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ml_wire.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\ombrowser.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\out_disk.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\out_ds.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\out_wave.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\playlist.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_activesync.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_android.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_cloud.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_ipod.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_njb.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_p4s.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_usb.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\pmp_wifi.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\tagz.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\vis_avs.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\vis_milk2.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\vis_nsfs.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\winamp.lng
c:\users\User\AppData\Local\Temp\WDE8955.tmp\winampa.lng
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-03-28 bis 2014-04-29  ))))))))))))))))))))))))))))))
.
.
2014-04-29 10:30 . 2014-04-29 10:33	--------	d-----w-	C:\Nightmare - The Aftermath
2014-04-28 16:55 . 2014-04-28 17:02	--------	d-----w-	C:\FRST
2014-04-22 10:52 . 2014-04-22 10:52	--------	d-----w-	C:\.GOTV
2014-04-19 15:44 . 2012-06-05 10:56	143360	------w-	c:\windows\Vmix108.dll
2014-04-19 15:44 . 2012-06-03 15:15	4533760	------w-	c:\windows\system32\CM108.cpl
2014-04-19 15:44 . 2012-08-21 15:24	12935168	------w-	c:\windows\SysWow64\CM108.dll
2014-04-19 15:44 . 2006-09-12 11:21	200704	------w-	c:\windows\SysWow64\cmpa108.dll
2014-04-19 15:44 . 2012-08-14 16:24	820224	------w-	c:\windows\system32\Cmeau108.exe
2014-04-19 15:39 . 2012-09-20 14:36	4326912	----a-w-	c:\windows\system32\drivers\CM10864.sys
2014-04-19 15:39 . 2012-09-03 17:58	315392	----a-w-	c:\windows\system\fltr108.dll
2014-04-19 15:39 . 2009-08-18 02:00	359424	------w-	c:\windows\system32\CmiInstallResAll64.dll
2014-04-19 15:39 . 2006-10-04 15:45	524768	----a-r-	c:\windows\difxapi.dll
2014-04-18 10:57 . 2014-04-18 11:01	--------	d-----w-	C:\21Octayne - Into The Open
2014-04-16 16:15 . 2014-04-16 16:23	--------	d-----w-	C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 13:04 . 2014-04-14 13:16	--------	d-----w-	C:\The Dirt - Takes You High
2014-04-12 19:14 . 2014-04-12 19:20	--------	d-----w-	C:\KENZINER - The Last Horizon
2014-04-09 09:33 . 2014-03-13 05:09	108032	----a-w-	c:\program files (x86)\Internet Explorer\jsdebuggeride.dll
2014-04-09 09:33 . 2014-03-13 06:33	51712	----a-w-	c:\windows\system32\ie4uinit.exe
2014-04-09 09:33 . 2014-03-13 03:51	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-04-09 09:33 . 2014-03-13 06:31	39936	----a-w-	c:\windows\system32\iernonce.dll
2014-04-09 09:33 . 2014-03-13 06:31	136704	----a-w-	c:\windows\system32\iesysprep.dll
2014-04-09 09:33 . 2014-03-13 05:09	109056	----a-w-	c:\windows\SysWow64\iesysprep.dll
2014-04-09 09:33 . 2014-03-13 03:59	89600	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2014-04-07 12:43 . 2014-04-07 17:55	--------	d-----w-	c:\users\User\AppData\Roaming\ArcSoft
2014-04-07 12:35 . 2014-01-07 12:36	968792	----a-w-	c:\windows\system32\drivers\hcwE5bda.sys
2014-04-07 12:35 . 2014-01-07 12:26	126464	----a-w-	c:\windows\system32\hcwE5prx.ax
2014-04-07 12:35 . 2014-01-07 12:25	127488	----a-w-	c:\windows\SysWow64\hcwE5prx.ax
2014-04-07 12:35 . 2013-05-06 03:36	4063232	----a-w-	c:\windows\system32\drivers\HcwE5ENC_t22_24.bin
2014-04-07 12:35 . 2013-05-06 03:36	2359296	----a-w-	c:\windows\system32\drivers\HcwE5CPU_MIPS.bin
2014-04-07 12:35 . 2013-02-05 08:39	46080	----a-w-	c:\windows\system32\hcwD1ep.ax
2014-04-07 12:35 . 2013-02-05 08:39	42496	----a-w-	c:\windows\SysWow64\hcwD1ep.ax
2014-04-07 12:30 . 2012-03-26 09:46	330568	----a-w-	c:\windows\SysWow64\hcwhdpvr.ax
2014-04-07 12:30 . 2014-04-07 12:36	--------	d-----w-	c:\program files (x86)\Hauppauge
2014-04-07 12:30 . 2006-10-10 15:47	36921	----a-w-	c:\windows\SysWow64\hcwutl32_priv.dll
2014-04-07 12:29 . 2006-09-18 06:50	22784	----a-w-	c:\windows\SysWow64\drivers\afc.sys
2014-04-07 12:25 . 2014-04-07 12:25	--------	d-----w-	c:\program files (x86)\Common Files\ArcSoft
2014-04-07 12:25 . 2014-04-07 12:25	--------	d-----w-	c:\programdata\ArcSoft
2014-04-07 12:24 . 2005-05-28 04:58	393216	----a-w-	c:\windows\SysWow64\MSLUP60.dll
2014-04-07 12:24 . 2005-07-16 00:35	245408	----a-w-	c:\windows\SysWow64\unicows.dll
2014-04-07 12:24 . 2014-04-07 12:24	--------	d-----w-	c:\program files (x86)\ArcSoft
2014-04-07 12:24 . 2007-04-19 07:39	256768	----a-w-	c:\windows\SysWow64\MSLURT.dll
2014-04-07 12:23 . 2013-04-17 13:05	323640	----a-w-	c:\windows\SysWow64\hcwpnp32.dll
2014-04-07 12:23 . 2012-05-18 15:03	118840	----a-w-	c:\windows\SysWow64\hcwi2c32.dll
2014-04-07 12:23 . 2009-02-16 21:09	831554	----a-w-	c:\windows\SysWow64\hcwtvwnd.dll
2014-04-07 12:23 . 2006-10-10 15:47	36921	----a-w-	c:\windows\SysWow64\hcwutl32.dll
2014-04-07 12:14 . 2006-09-08 11:40	139264	----a-w-	c:\windows\SysWow64\hcwECPPP.ax
2014-04-07 12:14 . 2006-08-15 14:21	146432	----a-w-	c:\windows\system32\hcwECPPP.ax
2014-04-07 12:14 . 2006-08-15 14:20	98304	----a-w-	c:\windows\system32\hcwCP.ax
2014-04-07 12:14 . 2006-09-08 11:40	96256	----a-w-	c:\windows\SysWow64\hcwCP.ax
2014-04-07 12:11 . 2014-04-07 12:11	--------	d-----w-	c:\users\User\AppData\Local\autorun
2014-04-04 08:22 . 2014-04-04 08:22	--------	d-----w-	c:\users\User\AppData\Local\Innovative Solutions
2014-04-04 08:22 . 2014-04-04 08:22	--------	d-----w-	c:\program files (x86)\Innovative Solutions
2014-04-03 18:07 . 2014-04-03 18:07	--------	d-----w-	c:\users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 18:07 . 2014-04-03 18:07	--------	d-----w-	c:\users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 18:04 . 2014-04-03 18:04	--------	d-----w-	c:\users\User\AppData\Local\MP3 Skype recorder
2014-04-03 16:27 . 2014-04-03 16:27	--------	d-----w-	c:\programdata\SystemRequirementsLab
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-11 09:19 . 2013-06-29 09:41	70832	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-11 09:19 . 2013-06-29 09:41	692400	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-09 23:50 . 2011-01-02 20:14	90655440	----a-w-	c:\windows\system32\MRT.exe
2014-03-29 22:11 . 2014-03-12 20:48	176128	----a-w-	c:\windows\SysWow64\RemoteControl.dll
2014-03-04 09:17 . 2014-04-09 09:32	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2014-02-07 01:23 . 2014-03-13 10:44	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-02-04 02:32 . 2014-03-13 10:44	1424384	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-13 10:44	624128	----a-w-	c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-13 10:44	1230336	----a-w-	c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-13 10:44	509440	----a-w-	c:\windows\SysWow64\qedit.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmazonMP3DownloaderHelper"="c:\users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]
"icq"="c:\users\User\AppData\Roaming\ICQM\icq.exe" [2013-11-20 29919576]
"Spotify Web Helper"="c:\users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-04-29 1171000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-11-11 205336]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-08-21 450560]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-20 689744]
.
c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Hauppauge Device Central Tray Tool.lnk - c:\program files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe [2014-4-7 578456]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux9"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 cpuz130;cpuz130;c:\users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys;c:\users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 hcwE5bda;Hauppauge Siena Video Capture;c:\windows\system32\drivers\hcwE5bda.sys;c:\windows\SYSNATIVE\drivers\hcwE5bda.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe;c:\program files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 HcwDevCentralService;HcwDevCentralService;c:\progra~2\HAUPPA~1\DEVICE~1\HCWDEV~1.EXE;c:\progra~2\HAUPPA~1\DEVICE~1\HCWDEV~1.EXE [x]
R4 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [x]
S3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\CM10864.sys;c:\windows\SYSNATIVE\drivers\CM10864.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
.
--------- X64 Entries -----------
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\users\User\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\
FF - prefs.js: browser.search.selectedEngine - Amazon.de
FF - prefs.js: browser.startup.homepage - www.google.de
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2011-01-13 07:52; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4108404334-124254829-2150622846-1001\Software\SecuROM\License information*]
"datasecu"=hex:69,64,25,d2,6d,11,a9,25,48,fb,e9,b3,64,2d,c5,d1,9b,e5,5f,6f,96,
   f4,6d,3c,38,4a,dc,de,fa,43,18,f9,96,f8,ac,67,c3,99,53,82,18,15,1c,1e,53,b7,\
"rkeysecu"=hex:04,17,59,4f,a7,a1,a0,10,e6,9d,c0,b1,41,1b,dc,dc
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_75_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_75_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_75_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_75_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-04-29  19:10:37 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-04-29 17:10
.
Vor Suchlauf: 85 Verzeichnis(se), 415.719.297.024 Bytes frei
Nach Suchlauf: 91 Verzeichnis(se), 415.590.445.056 Bytes frei
.
- - End Of File - - CBBA6B3D93D8BCA7058A298A3ED52C3D
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Die Einstellungen bezüglich Malwarebytes habe ich gar nicht im Programm. Weder das mit den Rootkits, noch den Bedrohungssuchlauf. Daher hab ich dann lediglich den Quickscan durchführen können.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.05.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16866
User :: USER-PC [Administrator]

01.05.2014 10:48:59
mbam-log-2014-05-01 (10-48-59).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 245364
Laufzeit: 9 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

Den ADW Cleaner hatte ich gestern Abend schon laufen lassen, hier aber die Logfile dazu:

# AdwCleaner v3.205 - Bericht erstellt am 30/04/2014 um 22:37:42
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\f8b34e3b5e6e337aa6491ee3f713f8f5\adwcleaner-3202.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\User\AppData\Local\Temp\OCS
Datei Gelöscht : C:\Windows\System32\Tasks\ProtectedSearch

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16866


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [54122 octets] - [28/03/2014 17:25:06]
AdwCleaner[R1].txt - [1299 octets] - [28/03/2014 17:47:14]
AdwCleaner[R2].txt - [1715 octets] - [30/04/2014 22:35:58]
AdwCleaner[S0].txt - [52832 octets] - [28/03/2014 17:29:40]
AdwCleaner[S1].txt - [1316 octets] - [28/03/2014 17:48:47]
AdwCleaner[S2].txt - [1586 octets] - [30/04/2014 22:37:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1646 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by User on 01.05.2014 at 11:06:36,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dropdowndeals_132013-0D68_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dropdowndeals_132013-0D68_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dropdowndeals_132013-0D68_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dropdowndeals_132013-0D68_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{66450212-1A2D-4DA6-8425-E1189261EAFE}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\thinstall"
Successfully deleted: [Folder] "C:\Users\User\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Windows\freecorder"
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{040EF061-4C45-4E16-A911-F432CFCDC0B3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{04C5F272-72D9-425F-9DEF-C79FB0F0CA6C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{050851BB-71E8-4069-87C8-76DB5265E961}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{064F6B48-7924-4D8D-98B5-ACA47C2B47CF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{073308A4-27EA-48A7-9B25-8B8676E603CB}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{081039E8-A27F-4723-A573-C3EDC5666ACA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{08831EB3-5E71-4BBB-92CE-6300489E8E0A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{088D7BCE-4ADB-42AC-B583-3D44A75E4BA1}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{0C8C1886-8713-45CE-99AD-21C5883D7D79}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{0CA299A6-C652-4786-8914-6AC982409AC9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{0CB7ED4A-CCC4-4A14-BAC9-F1CE52503B93}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{11C13B66-2EBC-4C92-8900-7C95EBB3BF88}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{127B4A69-38FD-4067-A852-4EF515F4F5CB}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{129DA2A2-2B99-4FA3-A266-859216C49C99}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{12D61476-A4BB-48F0-A321-A6BBF89D2E38}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1A92DB53-6AFF-4AE6-A493-CF827A9E94F8}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1AE9EF3E-0F2F-4967-97E6-7340BA702164}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1BC57695-65AF-46DE-98B1-9743B5CADFE5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1C5F335D-78DA-4A6C-B917-12EC626B561C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1D4E3FE2-DD12-4B81-BB30-D7ED2DFB0259}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1D9559B4-E199-433A-BE61-8F34526D9CA3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{1E8309D9-D299-48C2-9993-B4992386C5E5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{21472942-CED9-4FD3-8F4D-D13307E2DAC7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{21E70C0D-4F2D-4D1A-A139-AE981304A6B3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{2277F6EC-6968-40B0-9D68-B13E25C4B24B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{2633D565-D73A-4CD3-9389-FC46B5A4EDC8}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{28367988-C30B-4F72-8204-20F57282A71A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{3083F999-E0B3-48F6-8CA5-4BA1D9743AA7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{31D9C371-9E6C-4F1E-8BBF-989E7172E3DC}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{33D3BD31-B25E-4494-BF61-ADB9986378B2}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{36F81268-4FAA-4799-896E-E1FA424019C5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{3A5982EF-77B2-4C82-AA42-12F6E8C3DFD3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{3BC47A0B-CE1E-4B47-AC08-DF5B3F7F91CF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{40628D25-1C30-4E1E-AC57-DBB1C20FDF4E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{40BA609D-FA7F-4826-B1CE-FCBA7A3D7B3A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{40BB0EDA-3645-4D77-BF65-A4B39EC3AF2E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{41125217-05EA-42DE-94A0-E028A518EB17}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{42A340BD-ABD7-4FB4-B9D2-AD6B1005BAC4}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{42B31043-69A5-4D38-AE9F-9C0809F3427B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{42D5905B-81AF-4A79-B322-AFE32B69C630}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4B034A30-1D99-4B25-A718-8A996758F395}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4DE6FC1D-3E2A-4354-9D56-074FFF353F42}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4E396543-1BB1-43B8-BC73-A66CF59BAE2C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{4F06AEC8-B5AB-4AA7-B46F-2377763BDA06}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{501993E1-8D34-4766-BAB8-B289CFEAADA7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{50DDFDBF-C1F0-4776-966C-3E7394AF0ED6}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{50FB9D87-8112-461F-B3AC-6B62DEFA0C4C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{53AE5045-02C6-453A-8A72-8B7CFEA0B372}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{558CAE7D-FD3F-493F-9FC7-1B4D14A9535E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{5CEF82EF-D379-4FF2-AC48-FE5D64D4ADCD}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{5D373645-4E76-40EE-B000-81D78C8513F0}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{5FF97802-C945-4ED6-BC9E-F95EDF10B13F}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{61513D14-8771-44FF-9F2F-D989F0C88ABD}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6166E7C4-73E9-47C0-A5A9-F3F98CEBEBB7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{618A3C49-963C-46F1-8015-2E08AC7A048F}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6346AA8B-9503-4890-9875-2BDE2F681BA9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{64401D19-E259-4B1E-A0C4-9EF80C72BAFA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{67C57987-634E-4944-B1CB-1137FADD8147}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{68C76DD6-C321-41DF-B433-3F87F6D486FC}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{690B9C12-7E85-442C-B9A0-304DDDE861F3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{69BD86DF-DAE9-4083-998E-743B81A5AC70}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6B845058-983B-48CC-A026-9D5D95BE08B4}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6C3F7B75-9F68-40E2-BD0E-FB82E36F9FBB}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6DC91E30-8375-4D09-BCD4-8B38647D61D9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6E93E6D5-642F-4C86-A3CE-73EDD4D76359}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6F2AF358-2A76-4600-934E-C69A46EC749A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{6FDD29E0-9DF5-4421-A01D-10F7BC34DB5A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{76D4BE45-AEAF-40A6-8AF6-B7A93A640EF4}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{773DE6F7-33B6-4653-9D08-CF6B66298195}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{7960B338-D111-4485-97E3-B3D4EF8AA806}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{7D8DFB0B-0DDA-42F6-87CC-ABD764CDDBA2}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{856BB79F-E433-4BC4-B8E1-ADFC6BD4EAF7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{870CDCFB-B282-46BA-AD90-86C22FB17747}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{8A0DBC21-30D5-4206-852B-38EC5AAC53CD}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{8C833777-F30C-48CF-9016-8284F3647391}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{8E93EB75-D4C1-484F-ADCC-AEB1E347B48C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9366F65C-1683-48F8-B2A0-44AC434D0FC3}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{93827E5D-5027-4EDB-A792-54F57846CEA7}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{99F92CC8-3389-440B-8FB6-3A2C1B444DB5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9A0D70C9-FF23-463B-94C7-E1EFC3A33F6B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9DCC7EE9-3A93-4EC8-A051-30A3708E5226}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9F89834D-A039-4260-8E69-A913A346E3A6}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{9FA7B5B1-6CDB-484D-829C-3158D2A855D9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{A1DEB41E-FF14-4AEA-A1CA-6A95CACC408D}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{A5698E7F-D924-4AE8-9F38-04A4AEA759C6}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{A8B1A2F0-70C3-410D-956F-FA6011EC0DAA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AB2013AB-2A35-4AAF-8EEB-89835D3821FA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{ABD56A8A-0620-43C0-88A6-0CF382FC0527}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AC22CED2-B804-4C94-B410-43FC15872479}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AD2B4211-614C-4A5B-80A3-EA80CF91379E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AE4CD8E3-B9D7-4AEB-92AB-50BFF0CF400E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{AEAB2829-8A66-4EE1-B7C1-ADD82E01609D}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B0572B8A-F7E2-4418-A6A2-94CF39CC7E6E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B0A1888C-5EB1-41E6-96D0-D48DE621D655}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B31BD2F8-B6FD-41AD-A8EA-430D0FAC8111}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B342E0D4-91C7-4518-846D-5733FFA098C0}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B48F0685-0D09-4CFF-9584-8FBC290A8635}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B4AA7607-97BD-45A5-A69E-3431B045954E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B5594DC1-A3AC-4ECD-BCFD-CD017180309B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B64A036F-E165-447C-AF7E-C46B32BF8492}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B64F79D9-FE95-4B2D-BA6D-E64C7F5E49A6}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{B89945A6-83D0-40F5-86AE-EDE8B7AEB08B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{BA90C24D-78AD-4DCD-9679-69AA4CB1FEB4}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{BDB418FC-EA73-4671-8649-5A7C66E7E4DF}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{BDB6EED2-8A9C-4A3C-B7CB-7B6C20DA620C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{BE109631-5897-42AB-8985-BD3303208602}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C0109814-E42D-414C-9162-62223B523241}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C01DA810-1E29-4352-92BC-E72961BB715C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C356F1D8-CF5F-4BEA-821E-6DCA48B645C1}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C7A322CA-B6BC-49C8-B989-D48C4045E331}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C872E940-AE53-4F0C-B878-7FF224E2E0C9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{C93B946B-6F12-4995-9B1F-69B674EBB840}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{CA24C495-5DDA-4731-91D9-C35B66FF18CC}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{CBC9DBF7-306C-44A5-A769-2CF868DE2F21}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{CEC7DB58-9556-4E93-8A9A-63EA1E20F2C9}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D07E0D34-0D2C-46CD-B2D4-58EEFA0A6F60}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D0FB8EC6-74A1-4BCA-B4C1-4CC96DEA95AE}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D27D4F98-B7BB-4C73-9DBE-F72426B7F405}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D282E0D3-E056-4E1D-A7F0-72460DF13E2E}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D503A44F-FEF1-4937-9066-319138849A57}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D6AF026B-B946-4715-BFAD-E505D909D7EB}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D88AAB48-2B7F-44D7-B519-4C38F853FB59}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D92B70B3-085A-4AF9-BA81-BB11748893CA}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D951B3BF-C25E-4B35-84E5-459A82B2DA0D}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{D985D5FB-1D13-418D-880C-F3A33016896C}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{DB5062C4-1D46-4648-A3C2-B4EA3707A81A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{DD4E8F85-C41F-4CC5-BE84-CC30BBE1E76F}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{DD5F7E35-4F78-4C78-B317-E8FB38CE74ED}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{E0ED8B8A-3C38-47D2-8C8B-D7B5CFAFFD5B}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{E4A67D21-6F10-46D1-83A5-8141A3F63153}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{E81ACB9A-40B2-4791-A894-5CF7BEDB65F1}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{ED2F6031-A34E-4765-AC78-36849A183892}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F0103385-D421-4ED5-97E7-B301F01B1C49}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F180B136-B39C-443B-83F0-7A1A8C032AA5}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F4DD406D-C4D4-43DA-8A78-0D81BD96DD6F}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F52467AF-64FB-41CF-AC02-4D442E1C3A35}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F6A62029-9E3A-4CE3-8313-F372CEAE9E3A}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F7C275E9-CFFE-480C-BA66-0953D391D795}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F88972B1-9607-4BBF-951A-8DAA2CBA5453}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F8F93F2B-311B-48B2-B40B-352C00D07797}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{F9059801-53B3-45EE-9D96-0EF983D92B8D}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{FA845ADD-6BAD-4F81-867B-B9BE645A6837}
Successfully deleted: [Empty Folder] C:\Users\User\appdata\local\{FCC3E652-00A6-4B36-BB1F-85A9210BB69A}



~~~ FireFox

Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\2h5zb0c5.default\minidumps [202 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.05.2014 at 11:11:59,40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2014
Ran by User (administrator) on USER-PC on 01-05-2014 11:14:17
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
() C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Hauppauge Computer Works, Inc.) C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [icq] => C:\Users\User\AppData\Roaming\ICQM\icq.exe [29919576 2013-11-20] (ICQ)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-29] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hauppauge Device Central Tray Tool.lnk
ShortcutTarget: Hauppauge Device Central Tray Tool.lnk -> C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe (Hauppauge Computer Works, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCA3BD068BAAACB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Homepage: www.google.de
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ich@maltegoetz.de [2013-07-30]
FF Extension: YouTube to MP3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-11-30]
FF Extension: YouTube Video Download Wizard - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ytvdw@pgport.com.xpi [2011-05-08]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-04-08]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-07]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [291736 2012-09-11] (Hauppauge Computer Works, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [95896 2009-04-26] (SiSoftware)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2027840 2011-07-15] (TuneUp Software)
S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 Ati External Event Utility; %SystemRoot%\system32\Ati2evxx.exe [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-01-29] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-24] ()
S3 hcwE5bda; C:\Windows\System32\drivers\hcwE5bda.sys [968792 2014-01-07] (Hauppauge Computer Work, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-11-29] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz130; \??\C:\Users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-01 11:11 - 2014-05-01 11:11 - 00016854 _____ () C:\Users\User\Desktop\JRT.txt
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 18:33 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-29 18:33 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-29 18:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-29 18:32 - 2014-04-29 19:10 - 00000000 ____D () C:\Qoobox
2014-04-29 18:30 - 2014-04-29 19:08 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 18:27 - 2014-04-29 18:28 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 14:35 - 2014-04-29 14:35 - 00099092 _____ () C:\Users\User\Desktop\Extras.Txt
2014-04-29 14:33 - 2014-04-29 14:33 - 00112608 _____ () C:\Users\User\Desktop\OTL.Txt
2014-04-29 14:06 - 2014-04-29 23:45 - 00023591 _____ () C:\Users\User\Documents\use somebody.aup
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 12:30 - 2014-04-29 12:33 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 05:48 - 2014-04-30 22:39 - 00002536 _____ () C:\Windows\PFRO.log
2014-04-28 22:44 - 2014-05-01 10:23 - 00001783 _____ () C:\Windows\setupact.log
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 19:01 - 2014-04-28 19:02 - 00056955 _____ () C:\Users\User\Desktop\Addition.txt
2014-04-28 18:59 - 2014-05-01 11:14 - 00015178 _____ () C:\Users\User\Desktop\FRST.txt
2014-04-28 18:55 - 2014-05-01 11:14 - 00000000 ____D () C:\FRST
2014-04-28 18:51 - 2014-04-28 18:51 - 02061824 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-24 12:15 - 2014-04-25 01:12 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 16:27 - 2014-04-22 16:42 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-21 14:40 - 2014-04-24 16:37 - 00000000 ____D () C:\Users\User\Desktop\Unisonic (DE)
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2012-08-21 17:24 - 12935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll
2014-04-19 17:44 - 2012-08-14 18:24 - 00820224 ____N () C:\Windows\system32\Cmeau108.exe
2014-04-19 17:44 - 2012-06-05 12:56 - 00143360 ____N () C:\Windows\Vmix108.dll
2014-04-19 17:44 - 2012-06-03 17:15 - 04533760 ____N () C:\Windows\system32\CM108.cpl
2014-04-19 17:44 - 2006-09-12 13:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\cmpa108.dll
2014-04-19 17:39 - 2014-04-19 17:44 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:39 - 2012-12-05 19:29 - 00002603 ____N () C:\Windows\Cm108.ini.cfg
2014-04-19 17:39 - 2012-09-20 16:36 - 04326912 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\CM10864.sys
2014-04-19 17:39 - 2012-09-03 19:58 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltr108.dll
2014-04-19 17:39 - 2009-08-18 04:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-04-19 17:39 - 2006-10-04 17:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-04-18 19:32 - 2014-04-18 19:44 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 12:57 - 2014-04-18 13:01 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-18 00:58 - 2009-06-14 22:36 - 00000000 ____D () C:\Users\User\Desktop\Audiosurf
2014-04-16 18:15 - 2014-04-16 18:23 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:04 - 2014-04-14 15:16 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:14 - 2014-04-12 21:20 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-10 17:10 - 2014-04-25 19:36 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-09 11:34 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 11:34 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 19273728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 06:57 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 11:34 - 2014-03-13 06:47 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 11:33 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 11:33 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-09 11:33 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 11:33 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-09 11:32 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 11:32 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 11:32 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 11:32 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 11:32 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 11:32 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 11:32 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 11:32 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 11:32 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 14:43 - 2014-04-07 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-01-07 14:36 - 00968792 _____ (Hauppauge Computer Work, Inc.) C:\Windows\system32\Drivers\hcwE5bda.sys
2014-04-07 14:35 - 2014-01-07 14:26 - 00126464 _____ (Hauppauge Computer Works Inc.) C:\Windows\system32\hcwE5prx.ax
2014-04-07 14:35 - 2014-01-07 14:25 - 00127488 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwE5prx.ax
2014-04-07 14:35 - 2013-05-06 05:36 - 04063232 _____ () C:\Windows\system32\Drivers\HcwE5ENC_t22_24.bin
2014-04-07 14:35 - 2013-05-06 05:36 - 02359296 _____ () C:\Windows\system32\Drivers\HcwE5CPU_MIPS.bin
2014-04-07 14:35 - 2013-02-05 10:39 - 00046080 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwD1ep.ax
2014-04-07 14:35 - 2013-02-05 10:39 - 00042496 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwD1ep.ax
2014-04-07 14:34 - 2014-04-07 14:35 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:30 - 2014-04-07 14:36 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-03-26 11:46 - 00330568 _____ (Hauppauge, Inc.) C:\Windows\SysWOW64\hcwhdpvr.ax
2014-04-07 14:30 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32_priv.dll
2014-04-07 14:29 - 2006-09-18 08:50 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:24 - 2007-04-19 09:39 - 00256768 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLURT.dll
2014-04-07 14:24 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2014-04-07 14:24 - 2005-05-28 06:58 - 00393216 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLUP60.dll
2014-04-07 14:23 - 2014-04-07 14:36 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:23 - 2013-04-17 15:05 - 00323640 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2014-04-07 14:23 - 2012-05-18 17:03 - 00118840 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2014-04-07 14:23 - 2009-02-16 23:09 - 00831554 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2014-04-07 14:23 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2014-04-07 14:14 - 2014-04-07 14:36 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:14 - 2006-09-08 13:40 - 00139264 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwECPPP.ax
2014-04-07 14:14 - 2006-09-08 13:40 - 00096256 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwCP.ax
2014-04-07 14:14 - 2006-08-15 16:21 - 00146432 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwECPPP.ax
2014-04-07 14:14 - 2006-08-15 16:20 - 00098304 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwCP.ax
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-06 15:52 - 2014-04-06 15:51 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp
2014-04-01 00:27 - 2014-04-01 00:27 - 00000000 ____D () C:\Users\User\Desktop\Free Spirit EPK

==================== One Month Modified Files and Folders =======

2014-05-01 11:14 - 2014-04-28 18:59 - 00015178 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-01 11:14 - 2014-04-28 18:55 - 00000000 ____D () C:\FRST
2014-05-01 11:14 - 2013-02-03 19:43 - 00000000 ____D () C:\Users\User\Desktop\new stuff
2014-05-01 11:11 - 2014-05-01 11:11 - 00016854 _____ () C:\Users\User\Desktop\JRT.txt
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-05-01 10:47 - 2012-04-15 09:41 - 01889091 _____ () C:\Windows\WindowsUpdate.log
2014-05-01 10:23 - 2014-04-28 22:44 - 00001783 _____ () C:\Windows\setupact.log
2014-05-01 08:03 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-01 08:03 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-01 07:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-01 02:17 - 2011-01-03 00:42 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-05-01 02:17 - 2011-01-03 00:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-04-30 22:39 - 2014-04-29 05:48 - 00002536 _____ () C:\Windows\PFRO.log
2014-04-30 22:37 - 2014-03-28 17:24 - 00000000 ____D () C:\AdwCleaner
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-30 01:25 - 2011-07-02 22:37 - 00008965 _____ () C:\Users\User\Desktop\ygo.txt
2014-04-29 23:49 - 2013-06-22 13:38 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2014-04-29 23:45 - 2014-04-29 14:06 - 00023591 _____ () C:\Users\User\Documents\use somebody.aup
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 19:10 - 2014-04-29 18:32 - 00000000 ____D () C:\Qoobox
2014-04-29 19:10 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-29 19:08 - 2014-04-29 18:30 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 19:02 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-29 18:28 - 2014-04-29 18:27 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 15:06 - 2011-01-03 00:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-04-29 15:01 - 2011-02-09 00:24 - 00000000 ___RD () C:\Users\User\Desktop\mucke unso
2014-04-29 14:54 - 2012-05-28 14:42 - 00005632 ___SH () C:\Users\User\Thumbs.db
2014-04-29 14:35 - 2014-04-29 14:35 - 00099092 _____ () C:\Users\User\Desktop\Extras.Txt
2014-04-29 14:33 - 2014-04-29 14:33 - 00112608 _____ () C:\Users\User\Desktop\OTL.Txt
2014-04-29 14:23 - 2012-08-04 15:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spotify
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 13:29 - 2012-08-04 15:55 - 00000000 ____D () C:\Users\User\AppData\Local\Spotify
2014-04-29 12:33 - 2014-04-29 12:30 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 11:25 - 2011-01-13 08:45 - 00000000 ____D () C:\ProgramData\HP
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 19:02 - 2014-04-28 19:01 - 00056955 _____ () C:\Users\User\Desktop\Addition.txt
2014-04-28 18:51 - 2014-04-28 18:51 - 02061824 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-28 18:06 - 2011-01-22 00:09 - 00003768 _____ () C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2014-04-28 17:44 - 2012-04-15 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-28 17:43 - 2012-04-15 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 17:43 - 2012-04-15 10:03 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-04-28 17:42 - 2011-08-06 19:34 - 00000000 ____D () C:\Program Files (x86)\Zattoo4
2014-04-28 17:38 - 2011-10-13 01:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-04-28 17:38 - 2011-10-13 00:59 - 00000000 ____D () C:\AeriaGames
2014-04-28 17:36 - 2013-03-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-04-25 19:36 - 2014-04-10 17:10 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-25 01:12 - 2014-04-24 12:15 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-24 16:37 - 2014-04-21 14:40 - 00000000 ____D () C:\Users\User\Desktop\Unisonic (DE)
2014-04-22 23:22 - 2011-01-03 19:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-22 16:42 - 2014-04-22 16:27 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-20 18:58 - 2012-04-15 09:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-04-20 15:25 - 2013-11-04 02:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2014-04-19 17:39 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-19 17:39 - 2013-12-18 12:49 - 00001113 _____ () C:\Windows\system\Cm108.ini
2014-04-18 19:44 - 2014-04-18 19:32 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 13:01 - 2014-04-18 12:57 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-16 18:23 - 2014-04-16 18:15 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:16 - 2014-04-14 15:04 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:20 - 2014-04-12 21:14 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-11 11:20 - 2012-04-15 11:07 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 11:19 - 2013-06-29 11:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-11 11:19 - 2013-06-29 11:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-11 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 10:07 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-10 01:55 - 2011-01-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 01:53 - 2013-08-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 01:50 - 2011-01-02 22:14 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 15:46 - 2012-11-30 14:11 - 00000000 ____D () C:\Users\User\Desktop\Ich
2014-04-07 19:55 - 2014-04-07 14:43 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:36 - 2014-04-07 14:30 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:36 - 2014-04-07 14:23 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:36 - 2014-04-07 14:14 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-04-07 14:34 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:35 - 2014-04-07 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-04-15 09:52 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-07 12:32 - 2009-07-14 19:58 - 02325536 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 12:32 - 2009-07-14 19:58 - 00654144 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 12:32 - 2009-07-14 07:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 15:51 - 2014-04-06 15:52 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:57 - 2012-10-13 14:55 - 00000000 ____D () C:\Users\User\Desktop\rec
2014-04-04 10:57 - 2012-03-28 17:38 - 00000000 ____D () C:\Users\User\Desktop\Medleys
2014-04-04 10:55 - 2014-03-01 14:14 - 00000000 ____D () C:\Users\User\Desktop\winter season
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 18:27 - 2011-05-16 19:54 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp
2014-04-01 00:27 - 2014-04-01 00:27 - 00000000 ____D () C:\Users\User\Desktop\Free Spirit EPK

ZeroAccess:
C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30}

ZeroAccess:
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 06:06

==================== End Of Log ============================
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Der Eset Scanner läuft nun seit 7 1/2 Stunden und hängt seit ca. 5 Stunden bei 97% und dem Pfad C:\Windows\ServiceProfiles, wo er ZIGtausende Bilddateien oder so durchläuft. Ich hab im Internet dazu n bissl was gefunden. Das wohl der Windows Media Player da irgendwie Dateien ablegt oder so? Scheint auf jeden fall unnützes Zeug zu sein. Ich benutze den ja nicht mal bzw. kann ich als Unwissender kaum sagen, ob das der Grund ist. Da wirst du sicher mehr wissen. Ist das schon in deiner Theorie vom bereinigen meines Pc's miteinbezogen? Und wie lange kann der scan noch dauern? Es scheinen unzählige Dateien in diesem Ordner zu sein, die anscheinend auch viel Speicherplatz usw. wegnehmen. So hab jetzt alles soweit fertig...Wüsste aber gern was zu diesem ominösen Pfad.

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0eb48693cd1a1042a44d0237c2ea24dd
# engine=18108
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-02 06:49:56
# local_time=2014-05-02 08:49:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 45137 264483486 37904 0
# compatibility_mode=5893 16776574 100 94 24715234 150686446 0 0
# scanned=837842
# found=1
# cleaned=0
# scan_time=32901
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
         

 Results of screen317's Security Check version 0.99.82  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2011   
 TuneUp Utilities Language Pack (de-DE) 
 Java 7 Update 51  
 Java version out of Date! 
 Adobe Flash Player 13.0.0.206  
 Adobe Reader XI  
 Mozilla Firefox (28.0) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by User (administrator) on USER-PC on 02-05-2014 22:12:29
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
() C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Hauppauge Computer Works, Inc.) C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Last.fm) C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [icq] => C:\Users\User\AppData\Roaming\ICQM\icq.exe [29919576 2013-11-20] (ICQ)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-29] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hauppauge Device Central Tray Tool.lnk
ShortcutTarget: Hauppauge Device Central Tray Tool.lnk -> C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe (Hauppauge Computer Works, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCA3BD068BAAACB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Homepage: www.google.de
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ich@maltegoetz.de [2013-07-30]
FF Extension: YouTube to MP3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-11-30]
FF Extension: YouTube Video Download Wizard - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ytvdw@pgport.com.xpi [2011-05-08]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-04-08]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-07]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [291736 2012-09-11] (Hauppauge Computer Works, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [95896 2009-04-26] (SiSoftware)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2027840 2011-07-15] (TuneUp Software)
S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 Ati External Event Utility; %SystemRoot%\system32\Ati2evxx.exe [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-01-29] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-24] ()
S3 hcwE5bda; C:\Windows\System32\drivers\hcwE5bda.sys [968792 2014-01-07] (Hauppauge Computer Work, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-11-29] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz130; \??\C:\Users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-02 22:12 - 2014-05-02 22:12 - 00015498 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-02 22:10 - 2014-05-02 22:10 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-05-02 22:02 - 2014-05-02 22:02 - 00855379 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 18:33 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-29 18:33 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-29 18:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-29 18:32 - 2014-04-29 19:10 - 00000000 ____D () C:\Qoobox
2014-04-29 18:30 - 2014-04-29 19:08 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 18:27 - 2014-04-29 18:28 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 14:06 - 2014-05-01 13:28 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 12:30 - 2014-04-29 12:33 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 05:48 - 2014-04-30 22:39 - 00002536 _____ () C:\Windows\PFRO.log
2014-04-28 22:44 - 2014-05-02 11:16 - 00002343 _____ () C:\Windows\setupact.log
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 18:55 - 2014-05-02 22:12 - 00000000 ____D () C:\FRST
2014-04-28 18:51 - 2014-05-02 22:10 - 02062336 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-24 12:15 - 2014-04-25 01:12 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 16:27 - 2014-04-22 16:42 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2012-08-21 17:24 - 12935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll
2014-04-19 17:44 - 2012-08-14 18:24 - 00820224 ____N () C:\Windows\system32\Cmeau108.exe
2014-04-19 17:44 - 2012-06-05 12:56 - 00143360 ____N () C:\Windows\Vmix108.dll
2014-04-19 17:44 - 2012-06-03 17:15 - 04533760 ____N () C:\Windows\system32\CM108.cpl
2014-04-19 17:44 - 2006-09-12 13:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\cmpa108.dll
2014-04-19 17:39 - 2014-04-19 17:44 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:39 - 2012-12-05 19:29 - 00002603 ____N () C:\Windows\Cm108.ini.cfg
2014-04-19 17:39 - 2012-09-20 16:36 - 04326912 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\CM10864.sys
2014-04-19 17:39 - 2012-09-03 19:58 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltr108.dll
2014-04-19 17:39 - 2009-08-18 04:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-04-19 17:39 - 2006-10-04 17:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-04-18 19:32 - 2014-04-18 19:44 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 12:57 - 2014-04-18 13:01 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-18 00:58 - 2009-06-14 22:36 - 00000000 ____D () C:\Users\User\Desktop\Audiosurf
2014-04-16 18:15 - 2014-04-16 18:23 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:04 - 2014-04-14 15:16 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:14 - 2014-04-12 21:20 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-10 17:10 - 2014-04-25 19:36 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-09 11:34 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 11:34 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 19273728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 06:57 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 11:34 - 2014-03-13 06:47 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 11:33 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 11:33 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-09 11:33 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 11:33 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-09 11:32 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 11:32 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 11:32 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 11:32 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 11:32 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 11:32 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 11:32 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 11:32 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 11:32 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 14:43 - 2014-04-07 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-01-07 14:36 - 00968792 _____ (Hauppauge Computer Work, Inc.) C:\Windows\system32\Drivers\hcwE5bda.sys
2014-04-07 14:35 - 2014-01-07 14:26 - 00126464 _____ (Hauppauge Computer Works Inc.) C:\Windows\system32\hcwE5prx.ax
2014-04-07 14:35 - 2014-01-07 14:25 - 00127488 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwE5prx.ax
2014-04-07 14:35 - 2013-05-06 05:36 - 04063232 _____ () C:\Windows\system32\Drivers\HcwE5ENC_t22_24.bin
2014-04-07 14:35 - 2013-05-06 05:36 - 02359296 _____ () C:\Windows\system32\Drivers\HcwE5CPU_MIPS.bin
2014-04-07 14:35 - 2013-02-05 10:39 - 00046080 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwD1ep.ax
2014-04-07 14:35 - 2013-02-05 10:39 - 00042496 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwD1ep.ax
2014-04-07 14:34 - 2014-04-07 14:35 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:30 - 2014-04-07 14:36 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-03-26 11:46 - 00330568 _____ (Hauppauge, Inc.) C:\Windows\SysWOW64\hcwhdpvr.ax
2014-04-07 14:30 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32_priv.dll
2014-04-07 14:29 - 2006-09-18 08:50 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:24 - 2007-04-19 09:39 - 00256768 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLURT.dll
2014-04-07 14:24 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2014-04-07 14:24 - 2005-05-28 06:58 - 00393216 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLUP60.dll
2014-04-07 14:23 - 2014-04-07 14:36 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:23 - 2013-04-17 15:05 - 00323640 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2014-04-07 14:23 - 2012-05-18 17:03 - 00118840 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2014-04-07 14:23 - 2009-02-16 23:09 - 00831554 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2014-04-07 14:23 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2014-04-07 14:14 - 2014-04-07 14:36 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:14 - 2006-09-08 13:40 - 00139264 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwECPPP.ax
2014-04-07 14:14 - 2006-09-08 13:40 - 00096256 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwCP.ax
2014-04-07 14:14 - 2006-08-15 16:21 - 00146432 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwECPPP.ax
2014-04-07 14:14 - 2006-08-15 16:20 - 00098304 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwCP.ax
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-06 15:52 - 2014-04-06 15:51 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp

==================== One Month Modified Files and Folders =======

2014-05-02 22:13 - 2014-05-02 22:12 - 00015498 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-02 22:12 - 2014-04-28 18:55 - 00000000 ____D () C:\FRST
2014-05-02 22:10 - 2014-05-02 22:10 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-05-02 22:10 - 2014-04-28 18:51 - 02062336 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-05-02 22:09 - 2011-01-03 00:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-05-02 22:02 - 2014-05-02 22:02 - 00855379 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-05-02 21:54 - 2013-08-01 19:16 - 00001012 _____ () C:\Users\User\Desktop\adresse.txt
2014-05-02 18:36 - 2011-01-03 00:42 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-05-02 14:00 - 2012-04-15 09:41 - 01947194 _____ () C:\Windows\WindowsUpdate.log
2014-05-02 11:32 - 2013-06-29 11:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-02 11:32 - 2013-06-29 11:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-02 11:16 - 2014-04-28 22:44 - 00002343 _____ () C:\Windows\setupact.log
2014-05-02 08:20 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-02 08:20 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-02 08:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-02 01:57 - 2013-02-03 19:43 - 00000000 ____D () C:\Users\User\Desktop\new stuff
2014-05-02 01:45 - 2012-08-04 15:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spotify
2014-05-01 15:33 - 2013-06-22 13:38 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2014-05-01 13:28 - 2014-04-29 14:06 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-05-01 12:38 - 2012-12-27 13:45 - 00000000 ____D () C:\Users\User\Desktop\Emulator
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-04-30 22:39 - 2014-04-29 05:48 - 00002536 _____ () C:\Windows\PFRO.log
2014-04-30 22:37 - 2014-03-28 17:24 - 00000000 ____D () C:\AdwCleaner
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-30 01:25 - 2011-07-02 22:37 - 00008965 _____ () C:\Users\User\Desktop\ygo.txt
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 19:10 - 2014-04-29 18:32 - 00000000 ____D () C:\Qoobox
2014-04-29 19:10 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-29 19:08 - 2014-04-29 18:30 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 19:02 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-29 18:28 - 2014-04-29 18:27 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 15:06 - 2011-01-03 00:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-04-29 15:01 - 2011-02-09 00:24 - 00000000 ___RD () C:\Users\User\Desktop\mucke unso
2014-04-29 14:54 - 2012-05-28 14:42 - 00005632 ___SH () C:\Users\User\Thumbs.db
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 13:29 - 2012-08-04 15:55 - 00000000 ____D () C:\Users\User\AppData\Local\Spotify
2014-04-29 12:33 - 2014-04-29 12:30 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 11:25 - 2011-01-13 08:45 - 00000000 ____D () C:\ProgramData\HP
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 18:06 - 2011-01-22 00:09 - 00003768 _____ () C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2014-04-28 17:44 - 2012-04-15 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-28 17:43 - 2012-04-15 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 17:43 - 2012-04-15 10:03 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-04-28 17:42 - 2011-08-06 19:34 - 00000000 ____D () C:\Program Files (x86)\Zattoo4
2014-04-28 17:38 - 2011-10-13 01:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-04-28 17:38 - 2011-10-13 00:59 - 00000000 ____D () C:\AeriaGames
2014-04-28 17:36 - 2013-03-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-04-25 19:36 - 2014-04-10 17:10 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-25 01:12 - 2014-04-24 12:15 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 23:22 - 2011-01-03 19:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-22 16:42 - 2014-04-22 16:27 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-20 18:58 - 2012-04-15 09:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-04-20 15:25 - 2013-11-04 02:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2014-04-19 17:39 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-19 17:39 - 2013-12-18 12:49 - 00001113 _____ () C:\Windows\system\Cm108.ini
2014-04-18 19:44 - 2014-04-18 19:32 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 13:01 - 2014-04-18 12:57 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-16 18:23 - 2014-04-16 18:15 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:16 - 2014-04-14 15:04 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:20 - 2014-04-12 21:14 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-11 11:20 - 2012-04-15 11:07 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 10:07 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-10 01:55 - 2011-01-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 01:53 - 2013-08-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 01:50 - 2011-01-02 22:14 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 15:46 - 2012-11-30 14:11 - 00000000 ____D () C:\Users\User\Desktop\Ich
2014-04-07 19:55 - 2014-04-07 14:43 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:36 - 2014-04-07 14:30 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:36 - 2014-04-07 14:23 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:36 - 2014-04-07 14:14 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-04-07 14:34 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:35 - 2014-04-07 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-04-15 09:52 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-07 12:32 - 2009-07-14 19:58 - 02325536 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 12:32 - 2009-07-14 19:58 - 00654144 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 12:32 - 2009-07-14 07:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 15:51 - 2014-04-06 15:52 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:57 - 2012-10-13 14:55 - 00000000 ____D () C:\Users\User\Desktop\rec
2014-04-04 10:57 - 2012-03-28 17:38 - 00000000 ____D () C:\Users\User\Desktop\Medleys
2014-04-04 10:55 - 2014-03-01 14:14 - 00000000 ____D () C:\Users\User\Desktop\winter season
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions
2014-04-03 23:48 - 2014-04-03 23:48 - 00320287 _____ () C:\Users\User\Desktop\lou.aup
2014-04-03 23:48 - 2014-04-03 23:48 - 00000000 ____D () C:\Users\User\Desktop\lou_data
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\MP3SkypeRecorder
2014-04-03 20:07 - 2014-04-03 20:07 - 00000000 ____D () C:\Users\User\AppData\Local\MP3_Skype_Recorder
2014-04-03 20:04 - 2014-04-03 20:04 - 00002136 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3 Skype recorder.lnk
2014-04-03 20:04 - 2014-04-03 20:04 - 00000000 ____D () C:\Users\User\AppData\Local\MP3 Skype recorder
2014-04-03 18:27 - 2014-04-03 18:27 - 00000000 ____D () C:\ProgramData\SystemRequirementsLab
2014-04-03 18:27 - 2011-05-16 19:54 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-03 13:57 - 2014-04-03 13:57 - 00002981 _____ () C:\Users\User\Documents\kiri2.wlmp
2014-04-02 16:31 - 2014-04-02 16:31 - 00002990 _____ () C:\Users\User\Documents\kiri.wlmp

ZeroAccess:
C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30}

ZeroAccess:
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 06:06

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Abschließend (sofern wir überhaupt durch sind) wüsste ich gern, wie ich mich als Ottonormalbürger am besten vor all solchen Dingen (Übermüllung des Pc's, Spyware, Malware, Trojaner etc) schützen kann. Ich hab als Standardnutzer ganz obligatorisch Antivir drauf und die Windows Firewall an. Aber was wäre von nöten, um den Pc über einen langen Zeitraum gut instand zu halten?

Antivir is schon mal nit so prall. Rest machen wir nachher

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

ZeroAccess:
C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30}

ZeroAccess:
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Frisches FRST log bitte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2014
Ran by User at 2014-05-04 10:39:17 Run:1
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
ZeroAccess:
C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30}

ZeroAccess:
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@
*****************

C:\Windows\Installer\{adade411-b0d6-fae6-9e5b-284782aa6c30} => Moved successfully.
C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30} => Moved successfully.
"C:\Users\User\AppData\Local\{adade411-b0d6-fae6-9e5b-284782aa6c30}\@" => File/Directory not found.

==== End of Fixlog ====
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by User (administrator) on USER-PC on 04-05-2014 10:44:02
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
() C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Hauppauge Computer Works, Inc.) C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Oracle Corporation) C:\Users\User\Desktop\jre-7u55-windows-x64.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [icq] => C:\Users\User\AppData\Roaming\ICQM\icq.exe [29919576 2013-11-20] (ICQ)
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-04-29] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hauppauge Device Central Tray Tool.lnk
ShortcutTarget: Hauppauge Device Central Tray Tool.lnk -> C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe (Hauppauge Computer Works, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCA3BD068BAAACB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Homepage: www.google.de
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ich@maltegoetz.de [2013-07-30]
FF Extension: Firebug - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\firebug@software.joehewitt.com.xpi [2014-05-03]
FF Extension: YouTube to MP3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-11-30]
FF Extension: YouTube Video Download Wizard - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ytvdw@pgport.com.xpi [2011-05-08]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-04-08]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-07]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [291736 2012-09-11] (Hauppauge Computer Works, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [95896 2009-04-26] (SiSoftware)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2027840 2011-07-15] (TuneUp Software)
S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 Ati External Event Utility; %SystemRoot%\system32\Ati2evxx.exe [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-01-29] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-24] ()
S3 hcwE5bda; C:\Windows\System32\drivers\hcwE5bda.sys [968792 2014-01-07] (Hauppauge Computer Work, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-11-29] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz130; \??\C:\Users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 10:45 - 2014-05-04 10:44 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-04 10:44 - 2014-05-04 10:44 - 00000000 ____D () C:\Program Files\Java
2014-05-04 10:40 - 2014-05-04 10:41 - 30818216 _____ (Oracle Corporation) C:\Users\User\Desktop\jre-7u55-windows-x64.exe
2014-05-03 12:10 - 2013-06-29 08:07 - 00000000 ____D () C:\Users\User\Desktop\Imagine Dragons - Night Visions (Deluxe Version) [iTunesRipMP3]
2014-05-03 11:56 - 2014-05-03 12:01 - 153996317 _____ () C:\Users\User\Desktop\IDNightVisions(DV).rar
2014-05-03 02:02 - 2014-04-29 16:14 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 02:02 - 2014-04-29 14:47 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 02:02 - 2014-04-29 14:36 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 02:02 - 2014-04-29 14:25 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 22:12 - 2014-05-04 10:44 - 00015241 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-02 22:10 - 2014-05-02 22:10 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-05-02 22:02 - 2014-05-02 22:02 - 00855379 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 18:33 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-29 18:33 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-29 18:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-29 18:33 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-29 18:32 - 2014-04-29 19:10 - 00000000 ____D () C:\Qoobox
2014-04-29 18:30 - 2014-04-29 19:08 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 18:27 - 2014-04-29 18:28 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 14:06 - 2014-05-01 13:28 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 12:30 - 2014-04-29 12:33 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 05:48 - 2014-05-03 08:49 - 00003346 _____ () C:\Windows\PFRO.log
2014-04-28 22:44 - 2014-05-04 10:17 - 00003015 _____ () C:\Windows\setupact.log
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 18:55 - 2014-05-04 10:44 - 00000000 ____D () C:\FRST
2014-04-28 18:51 - 2014-05-02 22:10 - 02062336 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-04-24 12:15 - 2014-04-25 01:12 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 16:27 - 2014-04-22 16:42 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2012-08-21 17:24 - 12935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll
2014-04-19 17:44 - 2012-08-14 18:24 - 00820224 ____N () C:\Windows\system32\Cmeau108.exe
2014-04-19 17:44 - 2012-06-05 12:56 - 00143360 ____N () C:\Windows\Vmix108.dll
2014-04-19 17:44 - 2012-06-03 17:15 - 04533760 ____N () C:\Windows\system32\CM108.cpl
2014-04-19 17:44 - 2006-09-12 13:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\cmpa108.dll
2014-04-19 17:39 - 2014-04-19 17:44 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:39 - 2012-12-05 19:29 - 00002603 ____N () C:\Windows\Cm108.ini.cfg
2014-04-19 17:39 - 2012-09-20 16:36 - 04326912 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\CM10864.sys
2014-04-19 17:39 - 2012-09-03 19:58 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltr108.dll
2014-04-19 17:39 - 2009-08-18 04:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-04-19 17:39 - 2006-10-04 17:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-04-18 19:32 - 2014-04-18 19:44 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 12:57 - 2014-04-18 13:01 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-18 00:58 - 2009-06-14 22:36 - 00000000 ____D () C:\Users\User\Desktop\Audiosurf
2014-04-16 18:15 - 2014-04-16 18:23 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:04 - 2014-04-14 15:16 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:14 - 2014-04-12 21:20 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-10 17:10 - 2014-04-25 19:36 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-09 11:34 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 11:34 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-09 11:33 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 11:33 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-09 11:33 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 11:33 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-09 11:32 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 11:32 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 11:32 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 11:32 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 11:32 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 11:32 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 11:32 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 11:32 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 11:32 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 14:43 - 2014-04-07 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-01-07 14:36 - 00968792 _____ (Hauppauge Computer Work, Inc.) C:\Windows\system32\Drivers\hcwE5bda.sys
2014-04-07 14:35 - 2014-01-07 14:26 - 00126464 _____ (Hauppauge Computer Works Inc.) C:\Windows\system32\hcwE5prx.ax
2014-04-07 14:35 - 2014-01-07 14:25 - 00127488 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwE5prx.ax
2014-04-07 14:35 - 2013-05-06 05:36 - 04063232 _____ () C:\Windows\system32\Drivers\HcwE5ENC_t22_24.bin
2014-04-07 14:35 - 2013-05-06 05:36 - 02359296 _____ () C:\Windows\system32\Drivers\HcwE5CPU_MIPS.bin
2014-04-07 14:35 - 2013-02-05 10:39 - 00046080 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwD1ep.ax
2014-04-07 14:35 - 2013-02-05 10:39 - 00042496 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwD1ep.ax
2014-04-07 14:34 - 2014-04-07 14:35 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:30 - 2014-04-07 14:36 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-03-26 11:46 - 00330568 _____ (Hauppauge, Inc.) C:\Windows\SysWOW64\hcwhdpvr.ax
2014-04-07 14:30 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32_priv.dll
2014-04-07 14:29 - 2006-09-18 08:50 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:24 - 2007-04-19 09:39 - 00256768 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLURT.dll
2014-04-07 14:24 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2014-04-07 14:24 - 2005-05-28 06:58 - 00393216 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLUP60.dll
2014-04-07 14:23 - 2014-04-07 14:36 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:23 - 2013-04-17 15:05 - 00323640 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2014-04-07 14:23 - 2012-05-18 17:03 - 00118840 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2014-04-07 14:23 - 2009-02-16 23:09 - 00831554 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2014-04-07 14:23 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2014-04-07 14:14 - 2014-04-07 14:36 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:14 - 2006-09-08 13:40 - 00139264 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwECPPP.ax
2014-04-07 14:14 - 2006-09-08 13:40 - 00096256 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwCP.ax
2014-04-07 14:14 - 2006-08-15 16:21 - 00146432 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwECPPP.ax
2014-04-07 14:14 - 2006-08-15 16:20 - 00098304 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwCP.ax
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-06 15:52 - 2014-04-06 15:51 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions

==================== One Month Modified Files and Folders =======

2014-05-04 10:45 - 2014-05-02 22:12 - 00015241 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-04 10:44 - 2014-05-04 10:45 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-04 10:44 - 2014-05-04 10:44 - 00000000 ____D () C:\Program Files\Java
2014-05-04 10:44 - 2014-04-28 18:55 - 00000000 ____D () C:\FRST
2014-05-04 10:41 - 2014-05-04 10:40 - 30818216 _____ (Oracle Corporation) C:\Users\User\Desktop\jre-7u55-windows-x64.exe
2014-05-04 10:24 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 10:24 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 10:17 - 2014-04-28 22:44 - 00003015 _____ () C:\Windows\setupact.log
2014-05-04 10:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-04 02:20 - 2012-04-15 09:41 - 02011393 _____ () C:\Windows\WindowsUpdate.log
2014-05-04 02:12 - 2011-01-03 00:42 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-05-04 02:11 - 2011-01-03 00:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-05-03 12:01 - 2014-05-03 11:56 - 153996317 _____ () C:\Users\User\Desktop\IDNightVisions(DV).rar
2014-05-03 11:25 - 2013-03-08 11:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-03 08:49 - 2014-04-29 05:48 - 00003346 _____ () C:\Windows\PFRO.log
2014-05-02 22:15 - 2013-08-01 19:16 - 00001012 _____ () C:\Users\User\Desktop\adresse.txt
2014-05-02 22:10 - 2014-05-02 22:10 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-05-02 22:10 - 2014-04-28 18:51 - 02062336 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-05-02 22:02 - 2014-05-02 22:02 - 00855379 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-05-02 11:32 - 2013-06-29 11:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-02 11:32 - 2013-06-29 11:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-02 01:57 - 2013-02-03 19:43 - 00000000 ____D () C:\Users\User\Desktop\new stuff
2014-05-02 01:45 - 2012-08-04 15:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spotify
2014-05-01 15:33 - 2013-06-22 13:38 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2014-05-01 13:28 - 2014-04-29 14:06 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-05-01 12:38 - 2012-12-27 13:45 - 00000000 ____D () C:\Users\User\Desktop\Emulator
2014-05-01 11:06 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-01 11:05 - 2014-05-01 11:05 - 01016261 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-04-30 22:37 - 2014-03-28 17:24 - 00000000 ____D () C:\AdwCleaner
2014-04-30 22:32 - 2014-04-30 22:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\User\Desktop\AdwCleaner - CHIP-Downloader.exe
2014-04-30 01:25 - 2011-07-02 22:37 - 00008965 _____ () C:\Users\User\Desktop\ygo.txt
2014-04-29 19:10 - 2014-04-29 19:10 - 00026832 _____ () C:\ComboFix.txt
2014-04-29 19:10 - 2014-04-29 18:32 - 00000000 ____D () C:\Qoobox
2014-04-29 19:10 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-29 19:08 - 2014-04-29 18:30 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 19:02 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-29 18:28 - 2014-04-29 18:27 - 05197560 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-04-29 16:14 - 2014-05-03 02:02 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:06 - 2011-01-03 00:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-04-29 15:01 - 2011-02-09 00:24 - 00000000 ___RD () C:\Users\User\Desktop\mucke unso
2014-04-29 14:54 - 2012-05-28 14:42 - 00005632 ___SH () C:\Users\User\Thumbs.db
2014-04-29 14:47 - 2014-05-03 02:02 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:36 - 2014-05-03 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:25 - 2014-05-03 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 13:29 - 2012-08-04 15:55 - 00000000 ____D () C:\Users\User\AppData\Local\Spotify
2014-04-29 12:33 - 2014-04-29 12:30 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 11:25 - 2011-01-13 08:45 - 00000000 ____D () C:\ProgramData\HP
2014-04-28 22:11 - 2014-04-28 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\User\Desktop\OTL.exe
2014-04-28 18:06 - 2011-01-22 00:09 - 00003768 _____ () C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2014-04-28 17:44 - 2012-04-15 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-28 17:43 - 2012-04-15 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 17:43 - 2012-04-15 10:03 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-04-28 17:42 - 2011-08-06 19:34 - 00000000 ____D () C:\Program Files (x86)\Zattoo4
2014-04-28 17:38 - 2011-10-13 01:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-04-28 17:38 - 2011-10-13 00:59 - 00000000 ____D () C:\AeriaGames
2014-04-28 17:36 - 2013-03-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-04-25 19:36 - 2014-04-10 17:10 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-25 01:12 - 2014-04-24 12:15 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 23:22 - 2011-01-03 19:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-22 16:42 - 2014-04-22 16:27 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-20 18:58 - 2012-04-15 09:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-04-20 15:25 - 2013-11-04 02:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2014-04-19 17:39 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-19 17:39 - 2013-12-18 12:49 - 00001113 _____ () C:\Windows\system\Cm108.ini
2014-04-18 19:44 - 2014-04-18 19:32 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 13:01 - 2014-04-18 12:57 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-16 18:23 - 2014-04-16 18:15 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:16 - 2014-04-14 15:04 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:20 - 2014-04-12 21:14 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-11 11:20 - 2012-04-15 11:07 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 10:07 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-10 01:55 - 2011-01-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 01:53 - 2013-08-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 01:50 - 2011-01-02 22:14 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 15:46 - 2012-11-30 14:11 - 00000000 ____D () C:\Users\User\Desktop\Ich
2014-04-07 19:55 - 2014-04-07 14:43 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:36 - 2014-04-07 14:30 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:36 - 2014-04-07 14:23 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:36 - 2014-04-07 14:14 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:35 - 2014-04-07 14:35 - 00002107 _____ () C:\Users\Public\Desktop\Hauppauge Personal Logo inserter.lnk
2014-04-07 14:35 - 2014-04-07 14:34 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:35 - 2014-04-07 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00002107 _____ () C:\Users\Public\Desktop\HD PVR 2 Personal Logo Editor.lnk
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-04-15 09:52 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-07 14:26 - 2014-04-07 14:26 - 00002020 _____ () C:\Users\Public\Desktop\ArcSoft ShowBiz.lnk
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-07 12:32 - 2009-07-14 19:58 - 02325536 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 12:32 - 2009-07-14 19:58 - 00654144 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 12:32 - 2009-07-14 07:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 15:51 - 2014-04-06 15:52 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a
2014-04-04 10:57 - 2012-10-13 14:55 - 00000000 ____D () C:\Users\User\Desktop\rec
2014-04-04 10:57 - 2012-03-28 17:38 - 00000000 ____D () C:\Users\User\Desktop\Medleys
2014-04-04 10:55 - 2014-03-01 14:14 - 00000000 ____D () C:\Users\User\Desktop\winter season
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Users\User\AppData\Local\Innovative Solutions
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax
2014-04-04 10:22 - 2014-04-04 10:22 - 00000000 ____D () C:\Program Files (x86)\Innovative Solutions

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 06:06

==================== End Of Log ============================
         

--- --- ---

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Erstmal bedanke ich mich recht herzlich für deine extrem kompetente Hilfe bis hierhin! All deine Erklärungen waren auch für einen Laien wie mich gut nachzuvollziehen und es war förmlich spürbar, wie der Pc wieder schneller wird.

Allerdings hab ich jetzt gerade ein Problem. Ich hab mir die ganzen Programme aus deiner Empfehlung mal geladen und sie auch laufen zu lassen. Noscript, Spywareblaster, winpatrol, Secunia Online Software und TFC. Nachdem TFC durchlief, hat sich der pc sofort neugestartet und seitdem fühlt er sich irgendwie wieder langsamer an. Er lädt permanent irgenwas, obwohl gar nichts mehr passiert. Habe ihn für einige Minuten nach dem hochfahren in Ruhe gelassen, aber er lädt trotzdem noch immer was, was ihn deutlich verlangsamt. Die Leuchte am Rechner leuchtet dauerhaft auf. Programme laden DEUTLICH langsamer. Ich frag mich, was da jetzt los ist. Was das angeht, wäre ich dir dankbar, wenn du mir nochmal eine Hilfestellung geben könntest, woran das jetzt evtl. liegt.

Ansonsten war bisher wirklich alles top und ich habe mich mehr als gut beraten gefühlt!

Der Pc hatte sich dann gegen Abend halbwegs beruhigt und das ewige Laden fand ein Ende. Nun wo ich ihn wiedern hochgefahren hatte und 15 Minuten lang nicht dran war, hat er immer noch irgendwas geladen. Das hatte ich vorher nicht und ich frage mich, ob das jetzt mit einem der neuen Programme zusammenhängt, da es erst gestern nach dem Neustart von TFC einsetzte.

poste mal bitte ein frisches FRST log, ich schau mal drüber

Danke dir!


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2014
Ran by User (administrator) on USER-PC on 06-05-2014 11:08:45
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-4108404334-124254829-2150622846-1001\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [533568 2014-04-23] (BillP Studios)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCA3BD068BAAACB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default
FF DefaultSearchEngine: Amazon.de
FF SelectedSearchEngine: Amazon.de
FF Homepage: www.google.de
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\User\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ich@maltegoetz.de [2013-07-30]
FF Extension: WOT - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-04]
FF Extension: Firebug - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\firebug@software.joehewitt.com.xpi [2014-05-03]
FF Extension: YouTube to MP3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-11-30]
FF Extension: YouTube Video Download Wizard - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\ytvdw@pgport.com.xpi [2011-05-08]
FF Extension: NoScript - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-04]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2013-04-08]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\2h5zb0c5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-07]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-13]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [291736 2012-09-11] (Hauppauge Computer Works, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\RpcAgentSrv.exe [95896 2009-04-26] (SiSoftware)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2027840 2011-07-15] (TuneUp Software)
S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 Ati External Event Utility; %SystemRoot%\system32\Ati2evxx.exe [X]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-24] ()
S3 hcwE5bda; C:\Windows\System32\drivers\hcwE5bda.sys [968792 2014-01-07] (Hauppauge Computer Work, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-11-29] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz130; \??\C:\Users\User\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-06 11:08 - 2014-05-06 11:10 - 00015221 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-06 11:05 - 2014-05-06 11:08 - 00000000 ____D () C:\FRST
2014-05-06 10:57 - 2014-05-06 10:57 - 02063872 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-05-05 15:01 - 2014-05-05 15:03 - 00262688 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-05-04 17:54 - 2014-05-04 17:54 - 00042176 _____ () C:\Users\User\Desktop\demons.aup
2014-05-04 17:54 - 2014-05-04 17:54 - 00000000 ____D () C:\Users\User\Desktop\demons_data
2014-05-04 15:13 - 2014-05-04 15:13 - 00000000 ____D () C:\Windows\pss
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\Users\User\AppData\Roaming\WinPatrol
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-05-04 14:34 - 2014-05-04 14:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\HpUpdate
2014-05-04 14:33 - 2014-05-04 14:33 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-05-04 14:28 - 2014-05-04 14:28 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-04 14:24 - 2014-05-04 14:24 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-04 14:18 - 2014-05-04 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-04 14:16 - 2014-05-04 14:18 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-04 14:16 - 2014-05-04 14:18 - 00000000 ____D () C:\Program Files\iTunes
2014-05-04 14:16 - 2014-05-04 14:16 - 00000000 ____D () C:\Program Files\iPod
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-05-04 14:11 - 2014-05-04 14:11 - 00000000 ____D () C:\Program Files\Bonjour
2014-05-04 14:11 - 2014-05-04 14:11 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-05-04 14:08 - 2014-05-06 10:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-04 14:08 - 2014-05-04 14:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-04 14:06 - 2014-05-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 14:06 - 2014-05-04 14:06 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-05-04 14:03 - 2014-05-04 14:02 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-04 14:02 - 2014-05-04 14:02 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-04 13:22 - 2014-05-04 13:22 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-04 13:21 - 2014-05-04 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-04 13:20 - 2014-05-04 14:44 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-04 13:20 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2014-05-04 13:12 - 2014-05-04 13:12 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-04 13:12 - 2014-05-04 13:12 - 00000000 ____D () C:\Users\User\AppData\Local\Secunia PSI
2014-05-04 13:12 - 2014-05-04 13:12 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-05-04 12:44 - 2014-05-04 14:58 - 00000000 ____D () C:\Users\User\Desktop\pc sicherheit
2014-05-04 12:22 - 2014-05-04 12:22 - 00001192 _____ () C:\DelFix.txt
2014-05-04 10:45 - 2014-05-04 10:44 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-04 10:44 - 2014-05-04 10:44 - 00000000 ____D () C:\Program Files\Java
2014-05-03 12:10 - 2014-05-04 18:00 - 00000000 ____D () C:\Users\User\Desktop\Imagine Dragons - Night Visions (Deluxe Version) [iTunesRipMP3]
2014-05-03 02:02 - 2014-04-29 16:14 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-03 02:02 - 2014-04-29 14:47 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-03 02:02 - 2014-04-29 14:36 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-03 02:02 - 2014-04-29 14:25 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 11:06 - 2014-05-04 12:22 - 00000000 ____D () C:\Windows\ERUNT
2014-04-29 18:30 - 2014-05-04 12:16 - 00000000 ____D () C:\Windows\erdnt
2014-04-29 14:06 - 2014-05-01 13:28 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 12:30 - 2014-04-29 12:33 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 05:48 - 2014-05-04 14:50 - 00007554 _____ () C:\Windows\PFRO.log
2014-04-28 22:44 - 2014-05-06 10:34 - 00004079 _____ () C:\Windows\setupact.log
2014-04-24 12:15 - 2014-04-25 01:12 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 16:27 - 2014-04-22 16:42 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2012-08-21 17:24 - 12935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CM108.dll
2014-04-19 17:44 - 2012-08-14 18:24 - 00820224 ____N () C:\Windows\system32\Cmeau108.exe
2014-04-19 17:44 - 2012-06-05 12:56 - 00143360 ____N () C:\Windows\Vmix108.dll
2014-04-19 17:44 - 2012-06-03 17:15 - 04533760 ____N () C:\Windows\system32\CM108.cpl
2014-04-19 17:44 - 2006-09-12 13:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\cmpa108.dll
2014-04-19 17:39 - 2014-04-19 17:44 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:39 - 2012-12-05 19:29 - 00002603 ____N () C:\Windows\Cm108.ini.cfg
2014-04-19 17:39 - 2012-09-20 16:36 - 04326912 _____ (C-Media Electronics Inc) C:\Windows\system32\Drivers\CM10864.sys
2014-04-19 17:39 - 2012-09-03 19:58 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\fltr108.dll
2014-04-19 17:39 - 2009-08-18 04:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-04-19 17:39 - 2006-10-04 17:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2014-04-18 19:32 - 2014-04-18 19:44 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 12:57 - 2014-04-18 13:01 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-18 00:58 - 2009-06-14 22:36 - 00000000 ____D () C:\Users\User\Desktop\Audiosurf
2014-04-16 18:15 - 2014-04-16 18:23 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:04 - 2014-04-14 15:16 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:14 - 2014-04-12 21:20 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-10 17:10 - 2014-04-25 19:36 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-09 11:34 - 2014-03-13 08:33 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 11:34 - 2014-03-13 08:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-09 11:34 - 2014-03-13 08:32 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 11:34 - 2014-03-13 08:31 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-09 11:34 - 2014-03-13 07:10 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-09 11:34 - 2014-03-13 07:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-09 11:33 - 2014-03-13 08:33 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-09 11:33 - 2014-03-13 08:31 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 08:31 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-04-09 11:33 - 2014-03-13 07:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-09 11:33 - 2014-03-13 05:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 11:33 - 2014-03-13 05:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-04-09 11:32 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 11:32 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 11:32 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 11:32 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 11:32 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 11:32 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 11:32 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 11:32 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 11:32 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 11:32 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 11:32 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 14:43 - 2014-04-07 19:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:35 - 2014-01-07 14:36 - 00968792 _____ (Hauppauge Computer Work, Inc.) C:\Windows\system32\Drivers\hcwE5bda.sys
2014-04-07 14:35 - 2014-01-07 14:26 - 00126464 _____ (Hauppauge Computer Works Inc.) C:\Windows\system32\hcwE5prx.ax
2014-04-07 14:35 - 2014-01-07 14:25 - 00127488 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwE5prx.ax
2014-04-07 14:35 - 2013-05-06 05:36 - 04063232 _____ () C:\Windows\system32\Drivers\HcwE5ENC_t22_24.bin
2014-04-07 14:35 - 2013-05-06 05:36 - 02359296 _____ () C:\Windows\system32\Drivers\HcwE5CPU_MIPS.bin
2014-04-07 14:35 - 2013-02-05 10:39 - 00046080 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwD1ep.ax
2014-04-07 14:35 - 2013-02-05 10:39 - 00042496 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwD1ep.ax
2014-04-07 14:34 - 2014-04-07 14:35 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:30 - 2014-04-07 14:36 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2012-03-26 11:46 - 00330568 _____ (Hauppauge, Inc.) C:\Windows\SysWOW64\hcwhdpvr.ax
2014-04-07 14:30 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32_priv.dll
2014-04-07 14:29 - 2006-09-18 08:50 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:24 - 2007-04-19 09:39 - 00256768 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLURT.dll
2014-04-07 14:24 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2014-04-07 14:24 - 2005-05-28 06:58 - 00393216 _____ (Sample Corporation) C:\Windows\SysWOW64\MSLUP60.dll
2014-04-07 14:23 - 2014-04-07 14:36 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:23 - 2013-04-17 15:05 - 00323640 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2014-04-07 14:23 - 2012-05-18 17:03 - 00118840 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2014-04-07 14:23 - 2009-02-16 23:09 - 00831554 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2014-04-07 14:23 - 2006-10-10 17:47 - 00036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2014-04-07 14:14 - 2014-04-07 14:36 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:14 - 2006-09-08 13:40 - 00139264 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwECPPP.ax
2014-04-07 14:14 - 2006-09-08 13:40 - 00096256 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwCP.ax
2014-04-07 14:14 - 2006-08-15 16:21 - 00146432 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwECPPP.ax
2014-04-07 14:14 - 2006-08-15 16:20 - 00098304 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwCP.ax
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-06 15:52 - 2014-04-06 15:51 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a

==================== One Month Modified Files and Folders =======

2014-05-06 11:10 - 2014-05-06 11:08 - 00015221 _____ () C:\Users\User\Desktop\FRST.txt
2014-05-06 11:09 - 2012-04-15 09:41 - 01124929 _____ () C:\Windows\WindowsUpdate.log
2014-05-06 11:08 - 2014-05-06 11:05 - 00000000 ____D () C:\FRST
2014-05-06 11:00 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-06 11:00 - 2009-07-14 06:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-06 10:57 - 2014-05-06 10:57 - 02063872 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-05-06 10:57 - 2014-05-04 14:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-06 10:34 - 2014-04-28 22:44 - 00004079 _____ () C:\Windows\setupact.log
2014-05-06 10:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-06 01:26 - 2011-01-03 00:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-05-06 00:41 - 2011-01-03 00:42 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-05-05 15:03 - 2014-05-05 15:01 - 00262688 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-05-05 00:30 - 2013-06-22 13:38 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2014-05-04 18:00 - 2014-05-03 12:10 - 00000000 ____D () C:\Users\User\Desktop\Imagine Dragons - Night Visions (Deluxe Version) [iTunesRipMP3]
2014-05-04 17:54 - 2014-05-04 17:54 - 00042176 _____ () C:\Users\User\Desktop\demons.aup
2014-05-04 17:54 - 2014-05-04 17:54 - 00000000 ____D () C:\Users\User\Desktop\demons_data
2014-05-04 15:13 - 2014-05-04 15:13 - 00000000 ____D () C:\Windows\pss
2014-05-04 15:13 - 2012-04-15 09:52 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 14:58 - 2014-05-04 12:44 - 00000000 ____D () C:\Users\User\Desktop\pc sicherheit
2014-05-04 14:50 - 2014-04-29 05:48 - 00007554 _____ () C:\Windows\PFRO.log
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\Users\User\AppData\Roaming\WinPatrol
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 14:47 - 2014-05-04 14:47 - 00000000 ____D () C:\Program Files (x86)\BillP Studios
2014-05-04 14:44 - 2014-05-04 13:20 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-05-04 14:41 - 2014-05-04 14:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\HpUpdate
2014-05-04 14:37 - 2011-12-24 20:51 - 00001899 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-05-04 14:37 - 2011-12-24 20:51 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-05-04 14:34 - 2011-01-13 08:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-05-04 14:34 - 2011-01-13 08:47 - 00000000 ____D () C:\Program Files (x86)\HP
2014-05-04 14:33 - 2014-05-04 14:33 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-05-04 14:30 - 2011-01-14 01:28 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-04 14:28 - 2014-05-04 14:28 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-04 14:28 - 2011-01-03 01:12 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-04 14:28 - 2011-01-03 01:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-04 14:24 - 2014-05-04 14:24 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-04 14:18 - 2014-05-04 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-04 14:18 - 2014-05-04 14:16 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-04 14:18 - 2014-05-04 14:16 - 00000000 ____D () C:\Program Files\iTunes
2014-05-04 14:18 - 2011-01-03 01:54 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-05-04 14:16 - 2014-05-04 14:16 - 00000000 ____D () C:\Program Files\iPod
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-05-04 14:14 - 2014-05-04 14:14 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-05-04 14:11 - 2014-05-04 14:11 - 00000000 ____D () C:\Program Files\Bonjour
2014-05-04 14:11 - 2014-05-04 14:11 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-05-04 14:09 - 2011-01-03 01:52 - 00000000 ____D () C:\ProgramData\Apple
2014-05-04 14:08 - 2014-05-04 14:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-04 14:08 - 2013-06-29 11:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-04 14:08 - 2013-06-29 11:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-04 14:06 - 2014-05-04 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-05-04 14:06 - 2014-05-04 14:06 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-05-04 14:02 - 2014-05-04 14:03 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-04 14:02 - 2014-05-04 14:02 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-04 14:02 - 2014-05-04 14:02 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-04 13:22 - 2014-05-04 13:22 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-04 13:21 - 2014-05-04 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2014-05-04 13:12 - 2014-05-04 13:12 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-05-04 13:12 - 2014-05-04 13:12 - 00000000 ____D () C:\Users\User\AppData\Local\Secunia PSI
2014-05-04 13:12 - 2014-05-04 13:12 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-05-04 13:12 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 13:00 - 2012-04-15 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-04 12:58 - 2013-01-30 13:39 - 00000000 ____D () C:\Users\User\AppData\Local\Jaksta_Technologies_Pty_L
2014-05-04 12:58 - 2013-01-30 13:33 - 00000000 ____D () C:\Program Files (x86)\Applian Technologies
2014-05-04 12:56 - 2013-12-26 23:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-05-04 12:22 - 2014-05-04 12:22 - 00001192 _____ () C:\DelFix.txt
2014-05-04 12:22 - 2014-05-01 11:06 - 00000000 ____D () C:\Windows\ERUNT
2014-05-04 12:16 - 2014-04-29 18:30 - 00000000 ____D () C:\Windows\erdnt
2014-05-04 10:44 - 2014-05-04 10:45 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-04 10:44 - 2014-05-04 10:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-04 10:44 - 2014-05-04 10:44 - 00000000 ____D () C:\Program Files\Java
2014-05-03 11:25 - 2013-03-08 11:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-02 22:15 - 2013-08-01 19:16 - 00001012 _____ () C:\Users\User\Desktop\adresse.txt
2014-05-02 01:57 - 2013-02-03 19:43 - 00000000 ____D () C:\Users\User\Desktop\new stuff
2014-05-02 01:45 - 2012-08-04 15:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spotify
2014-05-01 13:28 - 2014-04-29 14:06 - 00023581 _____ () C:\Users\User\Documents\use somebody.aup
2014-05-01 12:38 - 2012-12-27 13:45 - 00000000 ____D () C:\Users\User\Desktop\Emulator
2014-04-30 01:25 - 2011-07-02 22:37 - 00008965 _____ () C:\Users\User\Desktop\ygo.txt
2014-04-29 19:10 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-29 19:02 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-29 16:14 - 2014-05-03 02:02 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:06 - 2011-01-03 00:36 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-04-29 15:01 - 2011-02-09 00:24 - 00000000 ___RD () C:\Users\User\Desktop\mucke unso
2014-04-29 14:54 - 2012-05-28 14:42 - 00005632 ___SH () C:\Users\User\Thumbs.db
2014-04-29 14:47 - 2014-05-03 02:02 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:36 - 2014-05-03 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:25 - 2014-05-03 02:02 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 14:06 - 2014-04-29 14:06 - 00000000 ____D () C:\Users\User\Documents\use somebody_data
2014-04-29 13:29 - 2012-08-04 15:55 - 00000000 ____D () C:\Users\User\AppData\Local\Spotify
2014-04-29 12:33 - 2014-04-29 12:30 - 00000000 ____D () C:\Nightmare - The Aftermath
2014-04-29 11:25 - 2011-01-13 08:45 - 00000000 ____D () C:\ProgramData\HP
2014-04-28 18:06 - 2011-01-22 00:09 - 00003768 _____ () C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2014-04-28 17:43 - 2012-04-15 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 17:43 - 2012-04-15 10:03 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-04-28 17:42 - 2011-08-06 19:34 - 00000000 ____D () C:\Program Files (x86)\Zattoo4
2014-04-28 17:38 - 2011-10-13 01:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-04-28 17:38 - 2011-10-13 00:59 - 00000000 ____D () C:\AeriaGames
2014-04-28 17:36 - 2013-03-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2014-04-25 19:36 - 2014-04-10 17:10 - 00000000 ____D () C:\Users\User\Desktop\THEmed
2014-04-25 01:12 - 2014-04-24 12:15 - 00000070 _____ () C:\Users\User\Desktop\mmm.txt
2014-04-22 23:22 - 2011-01-03 19:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-04-22 16:42 - 2014-04-22 16:27 - 528428265 _____ () C:\Users\User\Desktop\stormbringer-gotv.mkv
2014-04-22 12:52 - 2014-04-22 12:52 - 00000000 ____D () C:\.GOTV
2014-04-20 18:58 - 2012-04-15 09:52 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-04-20 15:25 - 2013-11-04 02:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-04-19 17:44 - 2014-04-19 17:44 - 00000442 _____ () C:\Windows\Cm108.ini.cfl
2014-04-19 17:44 - 2014-04-19 17:44 - 00000133 _____ () C:\Windows\system\Dlap.pfx
2014-04-19 17:44 - 2014-04-19 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SADES
2014-04-19 17:44 - 2014-04-19 17:39 - 00001164 _____ () C:\Windows\Cm108.ini.imi
2014-04-19 17:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-19 17:39 - 2013-12-18 12:49 - 00001113 _____ () C:\Windows\system\Cm108.ini
2014-04-18 19:44 - 2014-04-18 19:32 - 214679023 _____ () C:\Users\User\Desktop\Edguy 2014 320_mediaboom.org.rar
2014-04-18 13:01 - 2014-04-18 12:57 - 00000000 ____D () C:\21Octayne - Into The Open
2014-04-16 18:23 - 2014-04-16 18:15 - 00000000 ____D () C:\PETER PAN SPEEDROCK - Buckle Up And Shove It!
2014-04-14 15:16 - 2014-04-14 15:04 - 00000000 ____D () C:\The Dirt - Takes You High
2014-04-12 21:20 - 2014-04-12 21:14 - 00000000 ____D () C:\KENZINER - The Last Horizon
2014-04-11 11:20 - 2012-04-15 11:07 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-04-11 10:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-10 10:07 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-10 01:55 - 2011-01-29 13:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 01:53 - 2013-08-14 14:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 01:50 - 2011-01-02 22:14 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 15:46 - 2012-11-30 14:11 - 00000000 ____D () C:\Users\User\Desktop\Ich
2014-04-07 19:55 - 2014-04-07 14:43 - 00000000 ____D () C:\Users\User\AppData\Roaming\ArcSoft
2014-04-07 14:36 - 2014-04-07 14:30 - 00000000 ____D () C:\Program Files (x86)\Hauppauge
2014-04-07 14:36 - 2014-04-07 14:23 - 00004665 _____ () C:\Windows\HCWPNP.INI
2014-04-07 14:36 - 2014-04-07 14:14 - 00001180 _____ () C:\hcwDriverInstall.txt
2014-04-07 14:35 - 2014-04-07 14:34 - 05887344 _____ () C:\Users\User\Downloads\hdpvr2_driver_1_5_32007.exe
2014-04-07 14:35 - 2014-04-07 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:30 - 2014-04-07 14:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hauppauge
2014-04-07 14:26 - 2014-04-07 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft ShowBiz
2014-04-07 14:25 - 2014-04-07 14:25 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-04-07 14:24 - 2014-04-07 14:24 - 00000000 ____D () C:\Program Files (x86)\ArcSoft
2014-04-07 14:11 - 2014-04-07 14:11 - 00000000 ____D () C:\Users\User\AppData\Local\autorun
2014-04-07 12:32 - 2009-07-14 19:58 - 02325536 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 12:32 - 2009-07-14 19:58 - 00654144 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 12:32 - 2009-07-14 07:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 15:51 - 2014-04-06 15:52 - 00725867 _____ () C:\Users\User\Desktop\Ramy - Call me, call me.m4a

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 06:06

==================== End Of Log ============================
         

--- --- ---