Hallo !

Vor kurzem hat Schrauber mir bei einem BSOD Problem bei diesem Rechner geholfen (http://www.trojaner-board.de/163919-...dsskiller.html). Jetzt brauche ich leider schon wieder Hilfe. Bereits vor der ersten Systemüberprüfung hatte ich schon zweimal das Problem, das NS plötzlich nicht mehr lief (ich habe es erst bermerkt, nachdem die Windows Firewall sich mit einem Popup meldete, die ja eigentlich gar nicht laufen dürfte). Ich habe dann NS erneut gestartet und NS AutoFix konnte auch nicht helfen und verwies auf eine Supportseit mit der Fehlermeldung:


Ich habe dann (wie empfohlen) Norton Power Eraser laufen lassen...



Die gefunden Dateien halte ich für unverdächtig, und die meisten habe ich mit VirusTotal geprüft. Immer nur ein positiver Befund, meist durch Symantec.

Ich habe jetzt NS neu installiert. Aber auch aufgrund des Hinweises auf der Norton Seite glaube ich es könnte ein Virus im Spiel sein.

Ich bitte daher nochmal um Hilfe!

FRST:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by Holger (administrator) on HOLGER-QUADCORE on 03-03-2015 19:55:04
Running from C:\Users\Holger\Desktop
Loaded Profiles: Holger (Available profiles: Holger & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
() G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\pg_ctl.exe
(UltraVNC) G:\Program Files\UltraVNC\winvnc.exe
(VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
() G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe
() G:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe
(Sun Microsystems, Inc.) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\Tools\jre1.6.0_30\bin\java.exe
(VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(UltraVNC) G:\Program Files\UltraVNC\winvnc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Windows\SysWOW64\UMonit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Deutsche Post AG) G:\Program Files (x86)\STAMPIT\Binary\STRAY.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieCtrl.exe
(Flexera Software, Inc.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() G:\Program Files (x86)\applord GmbH\ecoDMS - Client\ecodmssinglesignon.exe
() G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Acronis) G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boincmgr.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinctray.exe
(VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\hqtray.exe
(CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
(CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe
(Elaborate Bytes AG) G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Piriform Ltd) G:\Program Files (x86)\CCleaner\CCleaner64.exe
(CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe
(BitLeader) G:\Program Files (x86)\lg_fwupdate\fwupdate.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe
() G:\Program Files\Core Temp\Core Temp.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe
(PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [391296 2010-09-08] (Acronis)
HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [200704 2006-12-29] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13774040 2015-02-15] (Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-02-05] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] => G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5514296 2010-09-08] (Acronis)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [boincmgr] => G:\Program Files (x86)\BOINC\boincmgr.exe [4793088 2009-11-06] (Space Sciences Laboratory)
HKLM-x32\...\Run: [boinctray] => G:\Program Files (x86)\BOINC\boinctray.exe [58112 2009-11-06] (Space Sciences Laboratory)
HKLM-x32\...\Run: [LGODDFU] => G:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-08-11] (Bitleader)
HKLM-x32\...\Run: [VMware hqtray] => G:\Program Files (x86)\VMware\VMware Player\hqtray.exe [64112 2010-11-11] (VMware, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [PowerDVD12DMREngine] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505872 2012-09-19] (CyberLink)
HKLM-x32\...\Run: [PowerDVD12Agent] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe [374560 2012-09-19] (CyberLink Corp.)
HKLM-x32\...\Run: [VirtualCloneDrive] => G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [OmniPage Preload] => G:\Program Files (x86)\Nuance\OmniPage18\OmniPage18.exe [2987880 2011-07-28] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance OmniPage 18-reminder] => G:\Program Files (x86)\Nuance\OmniPage18\Ereg\Ereg.exe [333088 2011-05-16] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => G:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2109952 2014-10-07] (Dominik Reichl)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [163328 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [STAMPIT-Tray] => G:\Program Files (x86)\STAMPIT\Binary\Stray.exe [83336 2010-06-11] (Deutsche Post AG)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2011-06-20] (Hewlett-Packard Company)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [SandboxieControl] => G:\Program Files\Sandboxie\SbieCtrl.exe [785416 2015-02-18] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Konni Symbol Autostart] => [X]
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Personal ID] => G:\coolspot AG\Personal ID\pid.exe [1134008 2009-03-04] (coolspot AG, Düsseldorf)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [OpAgent] => "OpAgent.exe" /agent
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [324976 2010-05-21] (Flexera Software, Inc.)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ecoprint] => G:\Program Files (x86)\applord GmbH\ecoDMS - Client\runcon.bat [95 2013-12-21] ()
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [CCleaner Monitoring] => G:\Program Files (x86)\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [FileHippo.com] => G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe [2926800 2015-01-27] ()
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\MountPoints2: {b0c0aea2-36ae-11df-b355-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\ubcd\website\index.html
HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-20] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk
ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.)
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Core Temp (2).lnk
ShortcutTarget: Core Temp (2).lnk -> G:\Program Files\Core Temp\Core Temp.exe ()
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {47F43F50-68E2-4F28-B949-26EE0EC9C505} URL = hxxp://www.buyertools.net/cgi-bin/preispiraten_de/nph.fcgi?qry_str={searchTerms}&category=deutsch&how=and&searchtype=simple&Web=on&wiki_tab=on&wiki_tab_old=+CHECKED&ebay_tab=on&ebay_tab_old=+CHECKED&shoppingcom_tab=on&shoppingcom_tab_old=+CHECKED&pirat_tab=on&pirat_tab_old=+CHECKED&JavaScript=enabled&submit=SUCHEN
SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {65C238F8-3FA6-4AEC-914D-8CD376F70CC6} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> G:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll ()
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} -  No File
DPF: HKLM-x32 {62415890-4985-0825-2508-23487C2A845F} hxxp://192.168.178.130/en/cab/ipcamera.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{5F13DFFA-CEB5-450C-8AC0-7FB7FA277C11}: [NameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o
FF Homepage: about:home
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin: synology.com/SurveillancePlugin_x86_64 -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin_x86_64.dll (Synology)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @qnap.com/MonitorPlayer -> C:\Program Files (x86)\QNAP\VioStorMonitor\npMonHost.dll ( QNAP System, Inc)
FF Plugin-x32: @videolan.org/vlc,version=0.9.9 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: synology.com/SurveillancePlugin -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin.dll (Synology)
FF Plugin HKU\S-1-5-21-2149552335-4145356072-959976354-1000: @hola.org/vlc,version=1.6.732 -> C:\Users\Holger\AppData\Local\Hola\firefox\app\vlc ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\firefox-add-ons.xml
FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\ixquick-https.xml
FF Extension: German Dictionary - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-08]
FF Extension: FoxyProxy Standard - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\foxyproxy@eric.h.jung [2015-02-06]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\iobitascsurfingprotection@iobit.com [2015-02-15]
FF Extension: Hola Better Internet - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2015-03-02]
FF Extension: KeeFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\keefox@chris.tomlinson [2015-01-17]
FF Extension: npIpcam - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\npapi@n.com [2013-07-01]
FF Extension: Flashblock - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-12-12]
FF Extension: Buyertools - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{411F2F11-830F-4AB5-B7F0-FBC77B870B5A} [2012-03-07]
FF Extension: WOT - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-12-03]
FF Extension: Preispiraten4 - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{A86278FF-6B63-446C-B109-DD4E1BAAC868} [2010-01-24]
FF Extension: Biet-O-Matic Firefox Erweiterung - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B0D70E72-2FC1-4b9f-A3D4-5921C854D906} [2010-03-07]
FF Extension: Preispiraten 4 Kontextmenü - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{D2A8BC29-8CA3-4C0A-A206-631C44E9620F} [2009-12-08]
FF Extension: PassIFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\passifox@hanhuy.com.xpi [2014-08-17]
FF Extension: TrashMail.com - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\spam@trashmail.net.xpi [2011-03-27]
FF Extension: Password Exporter - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2014-08-17]
FF Extension: Adblock Plus - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27]
FF Extension: DownThemAll! - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-17]
FF Extension: QuickJava - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2015-02-07]
FF Extension: MyKey Interface - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{FACC66B7-E49F-49ed-997E-66A221FD956D}.xpi [2011-04-01]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{2E6861CA-9A88-4B7B-B935-F810DE84D259} [2015-02-25]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{3F4D6A2C-841D-403C-8CD8-48E54192DDEB} [2015-02-25]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-02]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn [2015-03-03]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-03-03]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-03-03]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [506288 2011-02-08] (REINER SCT)
R2 CLHNServiceForPowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [90640 2012-09-19] (CyberLink Corp.)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [78352 2012-09-19] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [295440 2012-09-19] (CyberLink)
R2 DirMngr; G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-02-05] (NVIDIA Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2015-02-07] (SurfRight B.V.)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-06-20] (Hewlett-Packard Company) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 NS; C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe [282528 2014-12-10] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-02-05] (NVIDIA Corporation)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [508464 2013-07-01] (Samsung Electronics Co., Ltd.)
S3 SandraAgentSrv; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware) [File not signed]
R2 SbieSvc; G:\Program Files\Sandboxie\SbieSvc.exe [175112 2015-02-18] (Sandboxie Holdings, LLC)
R2 StarMoney 9.0 OnlineUpdate; G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 SyncThru Admin 6; G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe [204800 2013-05-03] () [File not signed]
R2 SyncThru Admin 6 Database; G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\pg_ctl.exe [66048 2012-08-31] (PostgreSQL Global Development Group) [File not signed]
R2 SynoDrService; G:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe [404480 2010-03-24] () [File not signed]
S3 ufad-ws60; G:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [191024 2010-08-19] (VMware, Inc.)
R2 uvnc_service; G:\Program Files\UltraVNC\WinVNC.exe [1793976 2009-12-07] (UltraVNC)
R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [113264 2010-11-11] (VMware, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AVXBAR; C:\Windows\System32\DRIVERS\88xAXbar.sys [20544 2009-11-05] (DTV-DVB Technology, Inc.)
R3 BDATUNE; C:\Windows\System32\DRIVERS\88xBdaTune.sys [60096 2009-11-05] (DTV-DVB Technology, Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\BASHDefs\20150224.001\BHDrvx64.sys [1622744 2015-02-24] (Symantec Corporation)
R1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1601000.009\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation)
R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2009-12-18] ()
R3 CX23880; C:\Windows\System32\DRIVERS\88xAStream.sys [200896 2009-11-05] (DTV-DVB Technology, Inc.)
R3 CX88IR; C:\Windows\System32\DRIVERS\88xBdaIr.sys [28224 2009-11-05] (DTV-DVB Technology, Inc.)
R3 CXAVSTS; C:\Windows\System32\DRIVERS\88xBdaCap.sys [35648 2009-11-05] (DTV-DVB Technology, Inc.)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-03] (Symantec Corporation)
U3 EraserUtilDrv11411; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11411.sys [142640 2015-03-03] (Symantec Corporation)
S3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic)
S3 FIXUSTOR; C:\Windows\SysWOW64\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2015-02-07] ()
R0 hotcore3; C:\Windows\SysWow64\drivers\hotcore3.sys [35096 2008-02-14] (Paragon Software Group)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-02-15] (REALiX(tm))
R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\IPSDefs\20150302.001\IDSvia64.sys [669400 2015-03-02] (Symantec Corporation)
S3 MEMSWEEP2; C:\Windows\system32\FF9A.tmp [6144 2010-05-26] (Sophos Plc) [File not signed]
R3 NAVENG; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150302.034\ENG64.SYS [129752 2015-03-03] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150302.034\EX64.SYS [2137304 2015-03-03] (Symantec Corporation)
R2 ntk_PowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-06-20] (Cyberlink Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-02-05] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 RemoteControl-USBLAN; C:\Windows\System32\DRIVERS\rcblan.sys [46616 2007-01-24] (Belcarra Technologies)
S3 RTCore64; G:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-18] ()
S3 SANDRA; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R3 SbieDrv; G:\Program Files\Sandboxie\SbieDrv.sys [237064 2015-02-18] (Sandboxie Holdings, LLC)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2015-02-15] (Synaptics Incorporated)
R3 SRTSP; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSP64.SYS [914648 2014-12-02] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSPX64.SYS [42200 2014-12-02] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NSx64\1601000.009\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NSx64\1601000.009\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2015-03-03] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSx64\1601000.009\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NSx64\1601000.009\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation)
S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [30720 2005-04-13] (The OpenVPN Project) [File not signed]
S3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2011-08-19] (The OpenVPN Project)
R1 UGURU; C:\Windows\System32\drivers\uGuru.sys [22064 2006-09-20] (ABIT)
U5 UnlockerDriver5; G:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbser64; C:\Windows\System32\DRIVERS\usbser.sys [33280 2013-08-29] (Microsoft Corporation)
R2 vstor2-ws60; G:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2010-08-19] (VMware, Inc.)
R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\NavFilter\000.fcl [147704 2012-09-19] (CyberLink Corp.)
R3 ALSysIO; \??\C:\Users\Holger\AppData\Local\Temp\ALSysIO64.sys [X]
S3 EST_BusEnum; system32\DRIVERS\GenBus.sys [X]
S3 NUS_Bus; system32\DRIVERS\NUS_Bus.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 19:55 - 2015-03-03 19:55 - 00036331 _____ () C:\Users\Holger\Desktop\FRST.txt
2015-03-03 19:54 - 2015-03-03 19:55 - 00000000 ____D () C:\FRST
2015-03-03 19:28 - 2015-03-03 19:28 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security
2015-03-03 19:25 - 2015-03-03 19:25 - 00102616 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2015-03-03 19:25 - 2015-03-03 19:25 - 00008214 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2015-03-03 19:25 - 2015-03-03 19:25 - 00002457 _____ () C:\Users\Public\Desktop\Norton Security.lnk
2015-03-03 19:24 - 2015-03-03 19:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2015-03-03 19:24 - 2015-03-03 19:24 - 00001301 _____ () C:\Users\Holger\Desktop\Norton-Installationsdateien.lnk
2015-03-03 19:24 - 2015-03-03 19:24 - 00000000 ____D () C:\Program Files (x86)\Norton Security
2015-03-03 19:12 - 2015-03-03 19:12 - 00000022 _____ () C:\Windows\S.dirmngr
2015-03-03 19:00 - 2015-03-03 19:00 - 02092544 _____ (Farbar) C:\Users\Holger\Desktop\FRST64.exe
2015-03-03 18:34 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Holger\Desktop\Virus
2015-03-03 17:42 - 2015-03-03 17:42 - 00002499 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2015-03-03 17:42 - 2015-03-03 17:42 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2015-03-03 17:42 - 2015-03-03 17:42 - 00000000 ____D () C:\Program Files (x86)\Nitro
2015-03-03 17:42 - 2013-07-26 06:57 - 00029712 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll
2015-03-03 17:42 - 2013-07-26 06:57 - 00017936 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll
2015-03-03 16:55 - 2015-03-03 16:55 - 00000704 _____ () C:\Users\Public\Desktop\CanWay.lnk
2015-03-03 16:55 - 2015-03-03 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CanWay
2015-03-02 19:25 - 2015-03-02 19:35 - 16572928 _____ (CanWay ) C:\Users\Holger\Downloads\CanWay Installer_1.1.10.exe
2015-03-02 19:23 - 2015-03-02 19:23 - 00000000 ____D () C:\Users\Holger\AppData\Local\GMap.NET
2015-03-02 19:21 - 2015-03-03 16:57 - 00010658 _____ () C:\Windows\DPINST.LOG
2015-03-02 19:21 - 2015-03-03 16:57 - 00000000 ____D () C:\Users\Holger\AppData\Local\CanWay
2015-03-02 19:21 - 2015-03-02 19:21 - 00000000 ____D () C:\Program Files (x86)\STMicroelectronics
2015-03-02 18:44 - 2015-03-02 18:44 - 00000000 ____D () C:\Users\Holger\Downloads\DGS-1210-24_fw_revD_4-20-B002_all_en_20141208
2015-03-02 18:42 - 2015-03-02 18:43 - 09189201 _____ () C:\Users\Holger\Downloads\DGS-1210-24_fw_revD_4-20-B002_all_en_20141208.zip
2015-03-02 17:49 - 2015-03-02 17:49 - 00003565 _____ () C:\Users\Holger\Downloads\config.bin
2015-03-02 17:49 - 2015-03-02 17:49 - 00001190 _____ () C:\Users\Holger\Downloads\Syslog.log
2015-02-26 18:22 - 2015-02-26 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-26 18:21 - 2015-02-26 18:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-26 18:21 - 2015-02-26 18:22 - 00000000 ____D () C:\Program Files\iTunes
2015-02-26 18:21 - 2015-02-26 18:21 - 00000000 ____D () C:\Program Files\iPod
2015-02-26 18:21 - 2015-02-26 18:21 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-02-25 17:05 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 17:05 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 16:56 - 2015-02-25 16:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-22 15:12 - 2015-02-22 15:12 - 00000903 _____ () C:\Users\Public\Desktop\FileZilla Client.lnk
2015-02-22 15:09 - 2015-02-22 15:10 - 06372800 _____ (Tim Kosse) C:\Users\Holger\Downloads\FileZilla_3.10.1.1_win32-setup.exe
2015-02-21 20:21 - 2015-02-21 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2015-02-21 16:01 - 2015-02-21 16:01 - 00000000 ____D () C:\Users\Holger\Downloads\fat32formatteren
2015-02-21 16:00 - 2015-02-21 16:01 - 00188133 _____ () C:\Users\Holger\Downloads\fat32formatteren.zip
2015-02-17 18:50 - 2015-02-17 18:50 - 00000000 ____D () C:\Windows\ERUNT
2015-02-17 18:12 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-17 18:12 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-17 18:12 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-17 18:12 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-16 10:42 - 2015-03-03 19:12 - 00040728 _____ () C:\Windows\PFRO.log
2015-02-15 19:25 - 2015-02-15 19:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2015-02-15 19:09 - 2015-02-15 19:09 - 02333416 _____ (Intel) C:\Users\Holger\Downloads\Intel Driver Update Utility Installer.exe
2015-02-15 18:47 - 2015-02-15 18:47 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2015-02-15 18:44 - 2015-02-15 18:44 - 71040000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2015-02-15 18:44 - 2015-02-15 18:44 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2015-02-15 18:44 - 2015-02-15 18:44 - 04263128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-02-15 18:44 - 2015-02-15 18:44 - 03186544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 02860760 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 02827120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-02-15 18:44 - 2015-02-15 18:44 - 01443340 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-02-15 18:44 - 2015-02-15 18:44 - 01411096 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 01287384 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00959704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00856992 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00629464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00451096 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00366104 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00326680 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00326680 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2015-02-15 18:44 - 2015-02-15 18:44 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 14048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 12967680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 05234952 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01550528 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01499984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01353472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00995120 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00979280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00303776 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll
2015-02-15 18:43 - 2015-02-15 18:43 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2015-02-15 18:40 - 2015-02-15 18:40 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2015-02-15 18:40 - 2015-02-15 18:40 - 00942808 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-02-15 18:40 - 2015-02-15 18:40 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2015-02-15 18:40 - 2015-02-15 18:40 - 00034544 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2015-02-15 18:40 - 2015-02-15 18:40 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2015-02-15 18:40 - 2015-02-15 18:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-02-15 18:40 - 2015-02-15 18:40 - 00000000 ____D () C:\Program Files\Synaptics
2015-02-15 18:38 - 2015-02-15 18:38 - 00123704 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys
2015-02-15 18:28 - 2015-02-15 18:28 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\ProductData
2015-02-15 18:27 - 2015-02-15 19:30 - 00002920 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Holger
2015-02-15 18:27 - 2015-02-15 18:27 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2015-02-15 18:27 - 2015-02-15 18:27 - 00000000 ____D () C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-02-15 18:26 - 2015-02-16 10:35 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-02-15 18:24 - 2015-02-25 17:19 - 00000000 ____D () C:\ProgramData\ProductData
2015-02-15 18:24 - 2015-02-15 19:30 - 00000000 ____D () C:\ProgramData\IObit
2015-02-15 18:24 - 2015-02-15 19:24 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Holger)
2015-02-15 18:24 - 2015-02-15 18:28 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\IObit
2015-02-15 18:24 - 2015-02-15 18:24 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2015-02-15 18:02 - 2015-02-15 18:02 - 00000000 ____D () C:\Program Files\Intel
2015-02-15 18:00 - 2015-02-15 18:00 - 01203488 _____ () C:\Users\Holger\Downloads\Driver Booster Free - CHIP-Installer.exe
2015-02-15 17:59 - 2015-02-15 17:59 - 02894032 _____ (Intel(R) Corporation) C:\Users\Holger\Downloads\SetupChipset.exe
2015-02-15 17:57 - 2015-02-15 17:57 - 00000134 _____ () C:\Users\Holger\Downloads\inf_v9001007.zip
2015-02-12 20:42 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 20:42 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 20:42 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 20:42 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-12 18:11 - 2015-02-05 18:57 - 00621384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-02-12 18:07 - 2015-02-05 22:01 - 32106640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 24768144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 20466496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 16017040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 14119744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 13294528 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 13208200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 10773704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 10284872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-02-12 18:07 - 2015-02-05 22:01 - 03610768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 03247248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434752.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434752.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00995248 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00969872 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00943760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00929936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00908104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00877816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00353224 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00305136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-02-12 18:07 - 2015-02-05 22:01 - 00164752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-12 18:04 - 2015-02-12 18:04 - 00000000 ____D () C:\NVIDIA
2015-02-12 17:59 - 2015-02-12 17:59 - 00640424 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\Holger\Downloads\rufus-1.4.12.exe
2015-02-12 17:55 - 2015-02-12 17:55 - 00000000 ____D () C:\Users\Holger\Downloads\grub4dos
2015-02-12 17:37 - 2015-02-12 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\Hirens.BootCD.15.2
2015-02-12 17:32 - 2015-02-12 17:37 - 309136440 _____ (NVIDIA Corporation) C:\Users\Holger\Downloads\347.52-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-02-12 17:26 - 2015-02-12 17:33 - 621283886 _____ () C:\Users\Holger\Downloads\Hirens.BootCD.15.2.zip
2015-02-12 17:11 - 2015-02-12 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\bluescreenview-x64
2015-02-12 17:09 - 2015-02-12 17:09 - 00085380 _____ () C:\Users\Holger\Downloads\bluescreenview-x64.zip
2015-02-12 17:09 - 2015-02-12 17:09 - 00001672 _____ () C:\Users\Holger\Downloads\bluescreenview_german.zip
2015-02-11 20:30 - 2015-02-11 20:33 - 00000335 _____ () C:\local.conf
2015-02-11 20:30 - 2015-02-11 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-02-11 07:29 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 07:29 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 07:29 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 07:29 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 07:29 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 07:29 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 07:29 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 07:29 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 07:29 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 07:29 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 07:29 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 07:29 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 07:29 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 07:29 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 07:29 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 07:29 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 07:29 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 07:29 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 07:29 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 07:29 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 07:29 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 07:29 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 07:29 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 07:29 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 07:29 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 07:29 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 07:29 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 07:29 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 07:29 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 07:29 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 07:29 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 07:29 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 07:29 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 07:29 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 07:29 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 07:29 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 07:29 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 07:29 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 07:29 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 07:29 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 07:29 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 07:29 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 07:29 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 07:29 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 07:29 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 07:29 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 07:29 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 07:29 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 07:29 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 07:29 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 07:29 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 07:29 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 07:29 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 07:29 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 07:29 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 07:29 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 07:29 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 07:29 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 07:29 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 07:29 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 07:29 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 07:29 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 07:28 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 07:28 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 07:28 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 07:28 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 07:28 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 07:28 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 07:28 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 07:28 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 07:28 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 07:28 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 07:28 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 07:28 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 07:28 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 07:28 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 07:28 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 07:28 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 07:28 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 07:28 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 07:28 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 07:28 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 07:28 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 07:28 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 07:28 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 07:28 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 07:28 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 07:28 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 07:28 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 07:28 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 07:28 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 07:28 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 07:28 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 07:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 07:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 07:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 07:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 07:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 07:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 07:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 07:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 07:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 07:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-09 17:19 - 2015-02-09 17:19 - 00005398 _____ () C:\Users\Holger\Downloads\LAN24TB_20150209.dss
2015-02-08 19:42 - 2015-02-08 19:42 - 00000000 ____D () C:\Users\Holger\Downloads\qd560w550bger
2015-02-08 19:39 - 2015-02-08 19:40 - 03067440 _____ () C:\Users\Holger\Downloads\qd560w550bger.exe
2015-02-08 01:00 - 2015-03-03 19:27 - 02211158 _____ () C:\Windows\setupact.log
2015-02-08 01:00 - 2015-02-08 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-07 19:34 - 2015-02-07 19:34 - 00000000 ____D () C:\Users\Holger\Downloads\Hola
2015-02-07 15:54 - 2015-02-07 15:54 - 00037970 _____ () C:\Users\Holger\Documents\cc_20150207_155358.reg
2015-02-07 15:54 - 2015-02-07 15:54 - 00024290 _____ () C:\Users\Holger\Documents\cc_20150207_155444.reg
2015-02-07 15:50 - 2015-02-07 15:50 - 05325208 _____ (Piriform Ltd) C:\Users\Holger\Downloads\ccsetup502.exe
2015-02-07 15:48 - 2015-02-07 15:48 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2015-02-07 15:47 - 2015-03-03 19:15 - 00000000 ____D () C:\Windows\CryptoGuard
2015-02-07 15:47 - 2015-02-09 15:32 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2015-02-07 15:47 - 2015-02-07 19:34 - 00548424 _____ (SurfRight) C:\Windows\system32\hmpalert.dll
2015-02-07 15:47 - 2015-02-07 19:34 - 00477008 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll
2015-02-07 15:47 - 2015-02-07 19:34 - 00093144 _____ () C:\Windows\system32\Drivers\hmpalert.sys
2015-02-07 15:47 - 2015-02-07 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2015-02-07 15:46 - 2015-02-07 15:46 - 01889616 _____ (SurfRight B.V.) C:\Users\Holger\Downloads\hmpalert.exe
2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\Desktop\FileHippo App Manager.lnk
2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk
2015-02-07 15:45 - 2015-02-07 15:45 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2015-02-07 15:41 - 2015-02-07 15:41 - 00849352 _____ () C:\Users\Holger\Downloads\AppManagerSetup_1.47.exe
2015-02-07 14:17 - 2015-02-07 14:17 - 00000000 ____D () C:\Windows\en
2015-02-07 14:16 - 2015-02-07 14:16 - 00001313 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-02-07 14:16 - 2015-02-07 14:16 - 00000000 ____D () C:\Windows\de
2015-02-07 14:15 - 2015-02-07 14:15 - 00001382 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-02-07 14:11 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-02-07 14:08 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-02-07 14:08 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-02-07 14:08 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-02-07 14:08 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-02-07 14:04 - 2015-02-07 14:04 - 00002212 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ___RD () C:\Users\Holger\OneDrive
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-02-07 13:55 - 2015-02-07 13:56 - 01239752 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-web(1).exe
2015-02-07 12:42 - 2015-02-07 12:42 - 00003206 _____ () C:\Windows\System32\Tasks\{00751C2C-0DE5-4235-8359-A01ADA1506E1}
2015-02-07 12:42 - 2015-02-07 12:42 - 00000093 _____ () C:\Windows\SysWOW64\FTCD2XXUN.ini
2015-02-07 12:42 - 2015-02-07 12:42 - 00000065 _____ () C:\Windows\SysWOW64\FTD2XXUN.ini
2015-02-07 12:42 - 2015-02-07 12:40 - 00420864 _____ (FTDI Ltd.) C:\Windows\SysWOW64\FTDIUNIN.exe
2015-02-07 12:39 - 2015-02-07 12:39 - 00000000 ____D () C:\Users\Holger\Downloads\FTClean
2015-02-07 12:36 - 2015-02-07 12:36 - 00452958 _____ () C:\Users\Holger\Downloads\FTClean.zip
2015-02-07 11:49 - 2015-02-07 11:49 - 156896601 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222956-1423258196.mp4
2015-02-07 11:48 - 2015-02-07 11:48 - 58965039 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222421-1423257861.mp4
2015-02-07 11:48 - 2015-02-07 11:48 - 169651682 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-220453-1423256693.mp4
2015-02-07 11:09 - 2015-02-07 11:09 - 00000000 ____D () C:\Program Files (x86)\Synology
2015-02-07 09:50 - 2015-02-07 09:50 - 17465344 _____ () C:\Users\Holger\Downloads\SurveillancePlugin(1).msi
2015-02-06 20:43 - 2015-02-07 13:07 - 00000634 _____ () C:\Users\Holger\Desktop\SANUK Control 3.0.lnk
2015-02-06 20:43 - 2015-02-06 20:43 - 00000634 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\SANUK Control 3.0.lnk
2015-02-06 20:43 - 2015-02-06 20:43 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SANUK CyberControl 3.0
2015-02-06 20:42 - 2015-02-06 20:43 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(2).exe
2015-02-06 19:54 - 2015-02-06 19:55 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(1).exe
2015-02-04 17:14 - 2015-02-04 17:14 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-04 15:56 - 2015-02-17 18:50 - 00001183 _____ () C:\DelFix.txt
2015-02-04 15:09 - 2015-02-04 15:09 - 00000331 _____ () C:\Users\Holger\Downloads\regfix(1).zip
2015-02-02 18:48 - 2015-02-02 18:48 - 00000000 ____D () C:\Users\Holger\Downloads\regfix
2015-02-02 18:47 - 2015-02-02 18:47 - 00000605 _____ () C:\Users\Holger\Downloads\regfix.zip
2015-02-01 14:17 - 2015-02-01 14:17 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 19:43 - 2014-08-17 14:37 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\KeePass
2015-03-03 19:43 - 2012-04-06 20:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-03 19:28 - 2012-11-21 18:24 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2015-03-03 19:28 - 2011-02-01 17:12 - 00000000 ____D () C:\ProgramData\Norton
2015-03-03 19:25 - 2015-01-24 15:06 - 00003214 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2015-03-03 19:25 - 2011-02-01 17:13 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2015-03-03 19:21 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-03 19:21 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-03 19:20 - 2010-07-29 15:06 - 00000373 _____ () C:\Windows\lgfwup.ini
2015-03-03 19:17 - 2010-03-23 20:26 - 01771805 _____ () C:\Windows\WindowsUpdate.log
2015-03-03 19:15 - 2013-10-15 19:17 - 00010636 _____ () C:\Users\Holger\IP_Log_Data.js
2015-03-03 19:15 - 2010-07-28 14:02 - 00000000 ____D () C:\ProgramData\Temp
2015-03-03 19:12 - 2013-10-12 10:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-03 19:12 - 2010-10-21 14:11 - 00000000 ____D () C:\ProgramData\VMware
2015-03-03 19:12 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-03 19:10 - 2013-03-16 17:33 - 00000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini
2015-03-03 19:03 - 2011-10-13 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Local\NPE
2015-03-03 19:00 - 2013-03-13 14:51 - 00648922 _____ () C:\Users\Holger\Network_Meter_Data.js
2015-03-03 18:16 - 2014-10-06 14:25 - 00000000 ____D () C:\NPE
2015-03-03 17:42 - 2012-09-25 19:42 - 00002011 _____ () C:\Users\Public\Desktop\Nitro Reader.lnk
2015-03-03 17:41 - 2012-09-25 19:41 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Downloaded Installations
2015-03-03 17:22 - 2010-03-23 21:24 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{424B6B76-676E-4BCF-A3EB-94365BADB9E1}
2015-03-02 19:21 - 2008-12-25 22:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-02 19:20 - 2010-01-13 16:51 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-03-02 19:06 - 2011-02-09 19:51 - 00000000 ____D () C:\Users\Holger\AppData\Local\CrashDumps
2015-03-02 18:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-02 16:24 - 2011-02-26 20:56 - 00001864 _____ () C:\Windows\Sandboxie.ini
2015-03-02 16:21 - 2012-05-03 18:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-26 20:08 - 2010-09-29 12:52 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2015-02-26 18:22 - 2014-02-08 12:05 - 00001761 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-02-26 18:21 - 2014-02-08 12:03 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-02-26 18:19 - 2009-07-14 18:58 - 00752936 _____ () C:\Windows\system32\perfh007.dat
2015-02-26 18:19 - 2009-07-14 18:58 - 00171984 _____ () C:\Windows\system32\perfc007.dat
2015-02-26 18:19 - 2009-07-14 06:13 - 01759042 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-22 15:14 - 2010-09-26 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\FileZilla
2015-02-22 15:11 - 2010-09-26 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-02-19 17:06 - 2013-02-22 21:37 - 00000000 ____D () C:\Users\Holger\Documents\Scan
2015-02-18 03:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-17 18:53 - 2011-07-14 15:47 - 00001389 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Settings.ini
2015-02-17 18:46 - 2010-03-23 20:08 - 00000000 ____D () C:\Users\Holger
2015-02-16 17:26 - 2013-02-22 17:54 - 00000072 _____ () C:\Users\Public\LMDebug.log
2015-02-16 09:49 - 2014-11-20 17:32 - 00000000 ____D () C:\Program Files (x86)\Versandhelfer
2015-02-15 18:46 - 2010-03-23 20:06 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-02-15 18:40 - 2010-01-06 00:39 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-02-15 18:26 - 2009-08-11 14:33 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Apple Computer
2015-02-15 18:01 - 2013-02-25 17:51 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-13 04:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-12 18:13 - 2013-10-12 13:36 - 00001355 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-02-12 18:12 - 2013-10-12 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-12 18:12 - 2010-07-29 15:06 - 00000000 ____D () C:\Temp
2015-02-12 18:04 - 2011-04-01 15:11 - 00000580 __RSH () C:\ProgramData\ntuser.pol
2015-02-12 17:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-02-12 17:42 - 2011-04-24 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2015-02-12 15:00 - 2010-06-12 16:24 - 00000000 ____D () C:\Windows\Minidump
2015-02-12 14:59 - 2012-10-19 11:35 - 00350400 _____ () C:\Windows\Minidump\021215-91453-01.dmp
2015-02-12 14:20 - 2009-07-14 05:45 - 02375592 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 14:18 - 2012-10-19 11:35 - 00350400 _____ () C:\Windows\Minidump\021215-114171-01.dmp
2015-02-12 04:45 - 2014-12-11 03:42 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 04:45 - 2014-05-07 02:04 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-12 03:41 - 2009-01-27 22:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-12 03:36 - 2013-08-16 02:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 03:23 - 2010-04-14 15:32 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 20:30 - 2015-01-25 21:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-11 20:30 - 2015-01-25 21:10 - 00097496 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-09 15:56 - 2013-09-03 15:06 - 00000000 ____D () C:\Users\Administrator
2015-02-09 15:41 - 2012-09-25 19:42 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Nitro PDF
2015-02-09 15:32 - 2012-10-19 11:35 - 00350776 _____ () C:\Windows\Minidump\020915-120312-01.dmp
2015-02-07 15:51 - 2010-11-20 18:49 - 00000730 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-07 14:16 - 2010-10-27 17:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-02-07 14:14 - 2010-10-27 17:24 - 00001466 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-02-07 14:13 - 2010-10-27 17:24 - 00002494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-02-07 14:12 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-02-07 14:11 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files\Windows Live
2015-02-07 14:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-02-06 20:31 - 2009-12-07 16:59 - 00000778 _____ () C:\Windows\HBCIKRNL.INI
2015-02-06 19:58 - 2010-10-09 12:23 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\TeamViewer
2015-02-05 22:01 - 2014-06-03 15:09 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-02-05 22:01 - 2014-06-03 15:09 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-02-05 22:01 - 2014-03-12 17:05 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-02-05 22:01 - 2013-10-28 16:14 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-02-05 22:01 - 2013-10-28 16:14 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-02-05 22:01 - 2013-10-12 13:14 - 17253848 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-02-05 22:01 - 2013-10-12 13:14 - 10713256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-02-05 22:01 - 2013-10-12 13:14 - 02902784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-02-05 22:01 - 2012-10-19 16:05 - 18575880 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-02-05 22:01 - 2012-10-19 16:05 - 03299512 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-05 20:07 - 2013-10-12 10:39 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-05 20:07 - 2011-01-16 16:13 - 06861128 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-05 20:07 - 2011-01-16 16:13 - 03517584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-05 20:07 - 2011-01-16 16:13 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-05 20:07 - 2011-01-16 16:13 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-05 20:06 - 2011-01-16 16:13 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-05 13:50 - 2013-10-12 11:21 - 04236870 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-05 00:43 - 2012-04-06 20:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 00:43 - 2012-04-06 20:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 00:43 - 2011-05-17 16:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2012-11-22 17:29 - 2012-11-22 17:29 - 0000545 _____ () C:\Users\Holger\AppData\Roaming\All CPU MeterV3_Settings.ini
2011-07-14 15:45 - 2012-01-27 18:51 - 0000412 _____ () C:\Users\Holger\AppData\Roaming\All CPU Meter_Settings.ini
2014-11-20 17:31 - 2014-11-20 17:31 - 0000353 _____ () C:\Users\Holger\AppData\Roaming\dpdhl.versandhelfer_state.xml
2012-03-04 17:31 - 2013-03-02 20:42 - 0000841 _____ () C:\Users\Holger\AppData\Roaming\Drives Meter_Settings.ini
2009-06-08 16:32 - 2012-02-04 12:35 - 0099384 _____ () C:\Users\Holger\AppData\Roaming\inst.exe
2011-07-14 15:47 - 2015-02-17 18:53 - 0001389 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Settings.ini
2013-03-16 17:33 - 2015-03-03 19:10 - 0000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini
2009-06-08 16:32 - 2012-02-04 12:35 - 0007859 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.cat
2009-06-08 16:32 - 2012-02-04 12:35 - 0001167 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.inf
2009-06-08 16:33 - 2012-02-04 12:35 - 0000033 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.log
2009-06-08 16:32 - 2012-02-04 12:35 - 0082816 _____ (VSO Software) C:\Users\Holger\AppData\Roaming\pcouffin.sys
2012-10-23 16:01 - 2012-10-27 17:16 - 11718656 _____ () C:\Users\Holger\AppData\Roaming\Sandra.mdb
2013-09-30 15:29 - 2013-10-05 15:10 - 0000676 _____ () C:\Users\Holger\AppData\Roaming\sqlite3Explorer.xml
2011-03-13 14:09 - 2013-12-12 17:22 - 0042744 _____ () C:\Users\Holger\AppData\Roaming\UserTile.png
2010-09-15 16:45 - 2014-07-27 16:49 - 0006144 _____ () C:\Users\Holger\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-09-27 14:58 - 2012-04-21 19:23 - 0000600 _____ () C:\Users\Holger\AppData\Local\PUTTY.RND
2013-10-29 12:39 - 2013-10-29 12:39 - 0001706 _____ () C:\Users\Holger\AppData\Local\recently-used.xbel
2010-04-07 14:59 - 2011-02-06 20:38 - 0007605 _____ () C:\Users\Holger\AppData\Local\resmon.resmoncfg
2012-02-04 11:43 - 2012-11-29 16:31 - 0000040 ___SH () C:\ProgramData\.zreglib
2015-02-15 18:47 - 2015-02-15 18:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-02-15 17:00 - 2013-03-13 14:41 - 0017571 _____ () C:\ProgramData\Network_Meter_Data.csv
2010-08-25 14:35 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xml6380.tmp
2010-11-19 19:25 - 2010-11-19 19:25 - 0013869 _____ () C:\ProgramData\xmlC2E1.tmp
2010-06-19 15:09 - 2010-11-19 19:25 - 0005975 _____ () C:\ProgramData\xmlD137.tmp
2010-06-19 15:09 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xmlD927.tmp
2010-06-19 15:09 - 2010-11-19 19:25 - 0001629 _____ () C:\ProgramData\xmlDA32.tmp

Files to move or delete:
====================
C:\Users\Holger\IP_Log_Data.js
C:\Users\Holger\Network_Meter_Data.js


Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.732.exe
C:\Users\Holger\AppData\Local\Temp\nitro_reader3_64.exe
C:\Users\Holger\AppData\Local\Temp\SandboxieInstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-26 18:46

==================== End Of Log ============================
         

--- --- ---


Addition im nächsten post...

Sorry, sehe grade, dass man auf den Fotos nix erkennen kann. Wenn die wichtig sind poste ich sie nochmal mit höherer Auflösung?!

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2015
Ran by Holger at 2015-03-03 19:56:05
Running from C:\Users\Holger\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.34 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0934-000001000000}) (Version: 9.34.00.0 - Igor Pavlov)
Acronis True Image Home 2011 (HKLM-x32\...\{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}) (Version: 14.0.5519 - Acronis)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced Renamer (HKLM-x32\...\Advanced Renamer_is1) (Version: 3.64 - Hulubulu Software)
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Biet-O-Matic v2.12.7 (HKLM-x32\...\Biet-O-Matic v2.12.7) (Version: Biet-O-Matic v2.12.7 - BOM Development Team)
BOINC (HKLM-x32\...\{4D12D805-50B2-4287-B3B9-AD4D74F85693}) (Version: 6.10.18 - Space Sciences Laboratory, U.C. Berkeley)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother P-touch Address Book 1.1 (HKLM-x32\...\{B2023017-DEE4-44F7-8A71-CA6084BF534C}) (Version: 1.1.2201 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0200 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Einzelhandel [DEU] (HKLM-x32\...\{DF776DAE-575D-4E1B-A436-158549FD65E4}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Event-Planung [DEU] (HKLM-x32\...\{2B540B0C-8AC4-42BE-A597-FDD1A788A0F5}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Feier [DEU] (HKLM-x32\...\{0BE7832F-D842-4C1F-B910-E99790416EDA}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Geburtstag [DEU] (HKLM-x32\...\{B6D72A3F-B3C9-4C2E-B98C-A22F06529B8C}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Paketversand [DEU] (HKLM-x32\...\{5EFFE155-E75B-4816-82BB-67C76A7E2C09}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Editor Etikettenvorlagen - Warnung [DEU] (HKLM-x32\...\{6CEBCCA3-0F3F-4B1C-B0E9-4E6E14546651}) (Version: 1.0.001 - Brother Industries, Ltd.)
Brother P-touch Update Software (HKLM-x32\...\{08BAC163-A5E8-4838-90A9-8C9343400579}) (Version: 1.0.0030 - Brother Industries, Ltd.)
CanWay Version 1.1.10 (HKLM-x32\...\{D609F0DB-AE53-4590-8B73-89810EDFB992}_is1) (Version: 1.1.10 - CanWay)
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5000 - CDBurnerXP)
Cinergy S PCI V1.00.02.09c (HKLM-x32\...\Cinergy S PCI) (Version: 1.00.02.09c - )
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Core Temp version 0.99.7 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 0.99.7 - Arthur Liberman)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.9.10 - REINER SCT)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2118a.57 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DreamBoxEdit -- The one and only settings editor for your Dreambox (HKLM-x32\...\DreamBoxEdit) (Version:  - )
DVDFab 9.0.7.2 (18/10/2013) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)
Easy RAR Recovery (HKLM-x32\...\Easy RAR Recovery) (Version: 2.0 - MunSoft)
EasyBCD 2.0 (HKLM-x32\...\EasyBCD) (Version: 2.0 - NeoSmart Technologies)
ecoDMS - Client (HKLM-x32\...\87CC2334-DF2E-4860-9651-8644F8C05DFC) (Version: 12.05 - applord GmbH)
ecoDMS - Printer (HKLM-x32\...\8A53B176-7CB8-49F8-AD87-F8A1625DDF01) (Version: 12.05 - applord gmbh)
ecoDMSOfficePlugin (HKLM-x32\...\{A0B706BC-10A3-4B35-8DE6-73AF8DBDE71F}) (Version: 1.9.5 - applord GmbH)
ecoDMSOfficePlugin (HKLM-x32\...\{A0B706BC-10A3-4B35-8DE6-73AF8DBDE72C}) (Version: 1.9.8 - applord GmbH)
ecoICE - Image Correction Editor (HKLM-x32\...\CA64A6D5-EDF0-4997-80E5-F9678C1AFCFB) (Version: 12.05 - applord GmbH)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
EVGA Precision X 4.2.1 (HKLM-x32\...\PrecisionX) (Version: 4.2.1 - EVGA Corporation)
ffdshow [rev 1723] [2007-12-24] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FileHippo App Manager (HKLM-x32\...\FileHippo.com) (Version:  - FileHippo.com)
FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Disc Burner version 3.0.8.221 (HKLM-x32\...\Free Disc Burner_is1) (Version: 3.0.8.221 - DVDVideoSoft Ltd.)
Free DVD Video Burner version 3.2.6.430 (HKLM-x32\...\Free DVD Video Burner_is1) (Version: 3.2.6.430 - DVDVideoSoft Ltd.)
Free Studio version 4.3 (HKLM-x32\...\Free Studio_is1) (Version:  - DVDVideoSoft Limited.)
Free Video Dub version 2.0.8.504 (HKLM-x32\...\Free Video Dub_is1) (Version: 2.0.8.504 - DVDVideoSoft Ltd.)
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{A79408B0-345D-42E8-8EB6-00597320B9E0}) (Version: 1.0.3 - AVM Berlin)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 2.4.0.5 - Genesys Logic)
Gpg4win (2.2.1) (HKLM-x32\...\GPG4Win) (Version: 2.2.1 - The Gpg4win Project)
HELI-X 3.0 Demo (HKLM-x32\...\{7AEF3482-B7B7-4B94-AF63-B249B9BA9D7F}_is1) (Version:  - Michael Schreiner)
HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 2.6.5.77 - SurfRight B.V.)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.24 - Intel(R) Corporation) Hidden
IPCamSetup (HKLM-x32\...\{02C39DE9-B03A-4FE7-89F9-61E224FE65CC}) (Version: 1.00.0000 - FOSCAM)
IPCMonitor_en version 1.0.1.4 (HKLM-x32\...\{8EC13308-5065-43FA-A5E8-E225F18DAB89}_is1) (Version: 1.0.1.4 - IPCMonitor, Inc.)
iPhoneBrowser (HKLM-x32\...\{C1FCDCA1-2759-4E5E-84EE-3A665BB2F513}) (Version: 1.9.3 - Cranium Consulting and Custom Software)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan)
IsoBuster 3.5 (HKLM-x32\...\IsoBuster_is1) (Version: 3.5 - Smart Projects)
iSpy (HKLM-x32\...\{4D1DD276-902C-4665-ABBD-13EC01BAFC0E}) (Version: 4.7.7 - iSpy)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
JMB36X Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KeePass Password Safe 2.28 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.28 - Dominik Reichl)
LG Tool Kit (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
LightScribe System Software (HKLM-x32\...\{2FA75B40-17C9-4D22-88CA-80A5D52FAB13}) (Version: 1.18.24.1 - LightScribe)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
MakeMKV v1.8.13 (HKLM-x32\...\MakeMKV) (Version: v1.8.13 - GuinpinSoft inc)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Media Add-ons für Acronis True Image Home 2011 (HKLM-x32\...\{9A5509EE-5579-46C1-B566-5065545547F9}) (Version: 14.0.5519 - Acronis)
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Ultimate 2007 (HKLM-x32\...\ULTIMATER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)
MKVToolNix 6.8.0 (32bit) (HKLM-x32\...\MKVtoolnix) (Version: 6.8.0 - Moritz Bunkus)
MobileMe Control Panel (HKLM\...\{41BC9E31-0D39-462E-8E4C-767B21A3B1C3}) (Version: 3.1.8.0 - Apple Inc.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 36.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0 (x86 de)) (Version: 36.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 31.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 de)) (Version: 31.4.0 - Mozilla)
MSXML 4.0 SP2 (KB941833) (HKLM-x32\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Neato Updater Tool v2 (HKLM-x32\...\{292156D3-43B5-4C96-B79A-94E40F8D8991}) (Version: 3.0 - Neato Robotics, Inc)
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
Norton Security (HKLM-x32\...\NS) (Version: 22.1.0.9 - Symantec Corporation)
Nuance OmniPage 18 (HKLM-x32\...\{560C6F9C-8D5E-4EAF-B408-98850E5DF49C}) (Version: 18.1.0000 - Nuance Communications, Inc.)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Paragon Hard Disk Manager 2008 Professional (HKLM-x32\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
Parallels runtime modules (x32 Version: 1.00.0000 - Parallels) Hidden
Parallels USB Driver (x32 Version: 6.00.15055 - Parallels) Hidden
PDF Split And Merge Basic (HKLM\...\{C91B24F6-1629-11E2-B696-21676188709B}) (Version: 2.2.2 - Andrea Vacondio)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.2 - Frank Heindörfer, Philip Chinery)
PhoenixRC (HKLM-x32\...\{6D44070C-86F9-424A-B514-6907E4335BCE}) (Version: 3.00.16 - Ihr Firmenname)
PINs 4 (HKLM-x32\...\PINs 4) (Version: 4.50.0.86 - Mirek Wojtowicz)
Preispilot für Firefox (HKLM-x32\...\{0D8E6567-7082-48DB-A305-293873AC8B39}_is1) (Version: 2.0 - Preispilot)
Preispiraten (HKLM-x32\...\{5384EA8A-FECA-4D6E-B7B4-3D4D9D47E5DF}) (Version: 6 - metaspinner net GmbH)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version:  - Jan Fiala)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QNAP Finder (HKLM-x32\...\QNAP_FINDER) (Version:  - )
QNAP Web Monitor Component (HKLM-x32\...\QNAPVioStorMonitor) (Version: 3.6.0.22010 - QNAP Systems, Inc.)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RagTime Privat (HKLM-x32\...\RagTime Privat) (Version:  - )
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7373 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
RivaTuner Statistics Server 5.2.0 (HKLM-x32\...\RTSS) (Version: 5.2.0 - Unwinder)
Samsung CLX-6260 Series (HKLM-x32\...\Samsung CLX-6260 Series) (Version: 1.05 (16.10.2012) - Samsung Electronics Co., Ltd.)
Samsung Easy Color Manager (HKLM-x32\...\{778EACF8-06C1-47AA-9284-91550E9BAD39}) (Version: 3.02.04 - Samsung Electronics Co., Ltd.)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.05.78 (28.06.2013) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.58.00(17.07.2013) - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.10.11 (01.07.2013) - Samsung Electronics Co., Ltd.)
Samsung OCR Software (HKLM-x32\...\Samsung OCR Software) (Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (x32 Version: 1.01.08.00 - Samsung Electronics Co., Ltd.) Hidden
Sandboxie 4.16 (64-bit) (HKLM\...\Sandboxie) (Version: 4.16 - Sandboxie Holdings, LLC)
SANUK CyberControl 3.0 (HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\SANUK CyberControl 3.0) (Version:  - )
ScanSnap (x32 Version: 5.1.30.19 - PFU Limited) Hidden
SDFormatter (HKLM-x32\...\{5A347920-4AFC-11D5-9FB0-800649886934}) (Version:  - )
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM-x32\...\{5C3C3D8E-9C3F-4E44-95FF-9458B12C09CD}) (Version: 6.4 - Silicon Laboratories, Inc.)
SiSoftware Sandra Lite 2012.SP5c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 18.74.2012.10 - SiSoftware)
Snagit 9.1.3 (HKLM-x32\...\{5C47C8B6-77FF-4FC7-A388-66FCF9CFC24C}) (Version: 9.1.3.16 - TechSmith Corporation)
SnapAPI (x32 Version: 3.0.306 - Acronis) Hidden
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)
Sophos Anti-Rootkit 1.5.4 (HKLM-x32\...\Sophos-AntiRootkit) (Version: 1.5.4 - Sophos Plc)
Stampit Home (HKLM-x32\...\{B83AAFD3-D8DE-46CE-9351-70C21AC6704E}) (Version: 3.3 - Deutsche Post AG)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney (x32 Version: 3.0.1.31 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney 9.0 apoEdition (HKLM-x32\...\{D34405B6-6480-4228-B811-4181F38411F8}) (Version: 9.0 - Star Finanz GmbH)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
SurveillancePlugin (HKLM-x32\...\{970AE435-8AAE-4F5E-A754-880DAC8968C5}) (Version: 1.0.0.565 - Synology)
SyncThru Admin 6.0.2.319 (HKLM\...\SyncThru Admin) (Version: 6.0.2.319 - Samsung Electronics Co., Ltd.)
Synology Assistant (HKLM-x32\...\{C59ADB1C-0403-4A11-8930-9F81ABC71908}) (Version: 1.0.0.0 - Synology Inc.)
Synology Data Replicator  3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
Synology Download Redirector (HKLM-x32\...\{B1E9B7ED-8187-433a-9EAE-20DF1A8968B1}) (Version: 1.0.0.0 - Synology Inc.)
System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version:  - )
System Requirements Lab for Intel (HKLM-x32\...\{F7FC9307-374E-4017-8E9D-DE1154780480}) (Version: 4.1.66.0 - Husdawg, LLC)
Tag&Rename 3.8.3 (HKLM-x32\...\Tag&Rename_is1) (Version: 3.8.3 - Softpointer Inc)
TagScanner 5.1.655 (HKLM-x32\...\TagScanner_is1) (Version:  - Sergey Serkov)
Tera Term 4.76 (HKLM-x32\...\Tera Term_is1) (Version:  - )
Tera Term Pro (HKLM-x32\...\Tera Term Pro) (Version:  - )
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
theRenamer 7.58 (HKLM-x32\...\{55B6344C-AE4F-4DA8-BF32-D7AE0CB4D2BE}_is1) (Version:  - theRenamer)
Tinypic 3.15 (HKLM-x32\...\{E3723A04-A894-4036-A78E-282E18F43C0A}_is1) (Version: Tinypic 3.15 - E. Fiedler)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.55 - Ghisler Software GmbH)
TotalPDFConverter (HKLM-x32\...\Total PDF Converter_is1) (Version: 2.8 - Softplicity, Inc.)
Trainingssoftware (HKLM-x32\...\{7C33F907-7A81-48B8-BD2D-D851C5FA9EFC}) (Version: 1.0.0 - IKE Software Solutions)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1 - TrueCrypt Foundation)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UltraVNC 1.0.8.2 (HKLM\...\Ultravnc2_is1) (Version: 1.0.8.2 - 1.0.8.2)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
Unlocker 1.9.0-x64 (HKLM\...\Unlocker) (Version: 1.9.0-x64 - Cedrick Collomb)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ULTIMATER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ULTIMATER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ULTIMATER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ULTIMATER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VCRedistSetup (x32 Version: 1.0.0 - Nero AG) Hidden
Versandhelfer (HKLM-x32\...\dpdhl.versandhelfer) (Version: 1.6 - Deutsche Post AG)
Versandhelfer (x32 Version: 1.6 - Deutsche Post AG) Hidden
Virtual COM Port Driver (HKLM-x32\...\InstallShield_{9853299F-7AD8-4560-9896-60650BD8ACBF}) (Version: 1.3.1 - STMicroelectronics)
Virtual COM Port Driver (x32 Version: 1.3.1 - STMicroelectronics) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VMware Player (HKLM-x32\...\VMware_Player) (Version: 3.1.3.14951 - VMware, Inc)
VMware Player (x32 Version: 3.1.3.14951 - VMware, Inc.) Hidden
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Installer Clean Up (HKLM-x32\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Neato Robotics, Inc. (usbser64) Ports  (08/08/2009 1.0.0.0) (HKLM\...\02AF1A75FA8A484C4B36225C5CE9770ECD2C3F04) (Version: 08/08/2009 1.0.0.0 - Neato Robotics, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{8235761D-4AF3-438A-B8E7-AFB83A927572}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\Windows Sidebar\Gadgets\NetGadget64.gadget\NETGAD~1.OCX (SystemGadgets.com)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2149552335-4145356072-959976354-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

02-03-2015 16:31:44 Windows Update
02-03-2015 16:34:18 Windows-Sicherung
02-03-2015 19:20:48 Installed Virtual COM Port Driver
02-03-2015 20:20:13 Windows-Sicherung
03-03-2015 16:55:27 Configured Virtual COM Port Driver
03-03-2015 17:14:55 Removed Nitro Reader 3
03-03-2015 17:41:45 Nitro Reader 3 wird installiert

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 13:34 - 2013-03-02 20:52 - 00000914 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.94.0.1	client.openvpn.net


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {01F93C8D-72DA-4E57-B961-B204BCCA9656} - System32\Tasks\{4D54EC34-A114-47F5-952E-10F0E05BCF9B} => pcalua.exe -a C:\Users\Holger\AppData\Local\Temp\SIT39039.tmp\setup.exe -d C:\Users\Holger\Desktop -c /web /createdtemp /noremove
Task: {1091566D-A4E4-4995-B338-CCD34725840B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {14E71595-B70E-41A3-BCC8-557806C68191} - System32\Tasks\{DDC1BE62-6BE1-4E05-A345-976F16016567} => \\LAN16TB\Qdownload\Software\AR-860\ar860_release_7.exe [2013-10-31] (Microsoft Corporation)
Task: {19555060-9BC6-488E-9FCF-3505C2DE4303} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe
Task: {1A35C5AC-FCDF-4B14-A0CD-4C6430DEF260} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
Task: {2241343D-42F7-4E1A-A6A1-AE45B4F0E8B7} - System32\Tasks\{00751C2C-0DE5-4235-8359-A01ADA1506E1} => pcalua.exe -a C:\Users\Holger\Downloads\FTClean\FTClean\FTClean.exe -d C:\Users\Holger\Downloads\FTClean\FTClean
Task: {25E66A45-3C7C-4380-948E-2F963151A51F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {29CE379D-6D8C-4D45-A749-6D094CC6BA2E} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {3A4CF5D8-438A-45AA-A311-F5F360CDD04E} - System32\Tasks\{4651B321-CCC4-4970-8378-F93F9AFFA6A7} => pcalua.exe -a C:\Users\Holger\Downloads\dotnetfx3setup.exe -d C:\Users\Holger\Downloads
Task: {47AA80E8-12EF-4871-AAD3-63264D366C63} - System32\Tasks\Norton Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\SymErr.exe [2014-12-03] (Symantec Corporation)
Task: {60F27F98-C988-4900-8A80-B53174FC3F9A} - System32\Tasks\Driver Booster SkipUAC (Holger) => D:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {66320C1B-F4C4-43C2-8E69-3560AE031B7F} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {773BEDA6-C413-472C-83DE-8B2ECFAA5841} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {8685ABED-B0AF-4644-9F9C-CBDD42488B02} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\WSCStub.exe [2014-12-10] (Symantec Corporation)
Task: {8A622EE7-C862-4228-B29A-41297518F34F} - System32\Tasks\Paragon Archive name arc_200109222223769 => G:\Program Files (x86)\Paragon Hard Disk Manager\program\scripts.exe [2008-02-14] ()
Task: {8A7B74F6-81F3-4A1A-850E-CF707CFBF6D7} - System32\Tasks\{4656EB54-7DAF-4357-8EE8-713BC2D315B2} => pcalua.exe -a C:\NVIDIA\DisplayDriver\197.45\WinVista_Win7_64\International\setup.exe -d C:\NVIDIA\DisplayDriver\197.45\WinVista_Win7_64\International
Task: {8B07DE4F-6A77-4E53-9015-0A13C293BE27} - System32\Tasks\{55B1856F-FB6C-4B5C-9041-8BFE0BBF347C} => pcalua.exe -a C:\Users\Holger\Downloads\Data_Replicator_0142\install\Setup.exe -d C:\Users\Holger\Downloads\Data_Replicator_0142\install
Task: {9AECA740-CCE5-42A4-A8C3-3D0B8A77595F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {9D79E829-BC19-4C6F-905D-49CE821E1AE6} - System32\Tasks\CCleanerSkipUAC => G:\Program Files (x86)\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {A5738141-8931-401C-B2BA-1C1E011C1CCA} - System32\Tasks\Norton Security\Norton Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\SymErr.exe [2014-12-03] (Symantec Corporation)
Task: {A64118A4-86B1-44A8-A4F9-50773F0A5934} - System32\Tasks\{9D7A00A4-9EA3-473E-98B9-2E43F8A8AE39} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {B989BDDD-24E8-47A5-A441-911C0A96D24F} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe
Task: {D256AC05-87E7-4042-AB83-B5BEBB1514F5} - System32\Tasks\Uninstaller_SkipUac_Holger => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {D99A0E12-1CED-42F2-B162-882C8021A86A} - System32\Tasks\{D0F106D5-7AE5-4C86-B881-DB7FD3469858} => pcalua.exe -a H:\Downloads\Graupner\REFLEX_SETUP_V5042DE.exe -d H:\Downloads\Graupner
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {FAF6E5EE-5005-409E-867E-D38D4431DCB1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Paragon Archive name arc_200109222223769.job => G:\Program Files (x86)\Paragon Hard Disk Manager\program\scripts.exew-Wno --alternate --graph --multiple G:/Program Files (x86)/Paragon Hard Disk Manager/scripts/scr_200109222544738.psl

==================== Loaded Modules (whitelisted) ==============

2013-10-12 10:39 - 2015-02-05 20:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-02-25 17:56 - 2013-12-03 21:51 - 00036680 _____ () C:\Windows\System32\dirport64.dll
2013-02-22 17:51 - 2012-01-10 05:15 - 00034304 _____ () C:\Windows\System32\ssy3clm.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-07 15:54 - 2013-10-07 15:54 - 00218112 _____ () G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2013-05-03 11:54 - 2013-05-03 11:54 - 00204800 _____ () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe
2010-03-24 17:29 - 2010-03-24 17:29 - 00404480 _____ () G:\Program Files (x86)\Synology Data Replicator  3\SynoDrServicex64.exe
2008-12-25 23:40 - 2006-12-29 06:37 - 00200704 ____R () C:\Windows\SysWOW64\UMonit.exe
2012-03-09 08:58 - 2012-03-09 08:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 08:58 - 2012-03-09 08:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-06-10 13:55 - 2013-06-10 13:55 - 00012520 _____ () C:\Users\Holger\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll
2013-06-10 13:55 - 2013-06-10 13:55 - 00015080 _____ () C:\Users\Holger\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll
2013-06-10 13:55 - 2013-06-10 13:55 - 00014056 _____ () C:\Users\Holger\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll
2013-02-25 17:50 - 2013-12-03 21:50 - 00712520 _____ () G:\Program Files (x86)\applord GmbH\ecoDMS - Client\ecodmssinglesignon.exe
2015-01-27 13:18 - 2015-01-27 13:18 - 02926800 _____ () G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe
2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () G:\Program Files (x86)\CCleaner\lang\lang-1031.dll
2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () G:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2010-04-30 00:40 - 2010-04-30 00:40 - 00013312 _____ () G:\Program Files\Unlocker\UnlockerCOM.dll
2012-11-22 17:27 - 2010-07-02 13:52 - 00530448 _____ () G:\Program Files\Core Temp\Core Temp.exe
2011-12-16 15:38 - 2007-05-31 07:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00221184 _____ () G:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2013-10-07 15:47 - 2013-10-07 15:47 - 00037888 _____ () G:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2013-10-07 15:44 - 2013-10-07 15:44 - 00050176 _____ () G:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00069632 _____ () G:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00628224 _____ () G:\Program Files (x86)\GNU\GnuPG\libgcrypt-11.dll
2014-08-14 04:54 - 2011-01-13 11:44 - 00232800 _____ () G:\Program Files (x86)\StarMoney9.0\ouservice\PATCHW32.dll
2012-08-31 10:13 - 2012-08-31 10:13 - 00172032 _____ () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\LIBPQ.dll
2012-08-31 10:13 - 2012-08-31 10:13 - 00976384 _____ () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\libxml2.dll
2012-08-31 10:13 - 2012-08-31 10:13 - 00059904 _____ () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\zlib1.dll
2013-05-03 11:54 - 2013-05-03 11:54 - 00081920 _____ () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\wrapper.dll
2010-11-11 13:31 - 2010-11-11 13:31 - 00970352 _____ () G:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2010-11-11 13:31 - 2010-11-11 13:31 - 00068720 _____ () G:\Program Files (x86)\VMware\VMware Player\zlib1.dll
2008-12-25 23:40 - 2006-06-07 12:17 - 00151552 ____R () C:\Windows\SysWOW64\ustor.dll
2010-06-11 09:56 - 2010-06-11 09:56 - 00029576 _____ () G:\Program Files (x86)\STAMPIT\Binary\SDSERROR.DLL
2010-06-11 09:56 - 2010-06-11 09:56 - 00087432 _____ () G:\Program Files (x86)\STAMPIT\Binary\SDSEVENT.DLL
2011-06-17 11:46 - 2011-06-17 11:46 - 02408448 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2011-06-17 11:46 - 2011-06-17 11:46 - 08626176 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2011-06-17 11:46 - 2011-06-17 11:46 - 00212992 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2013-02-25 17:50 - 2013-12-03 21:50 - 00076616 _____ () G:\Program Files (x86)\applord GmbH\ecoDMS - Client\classifyclient.dll
2013-02-25 17:50 - 2013-12-03 21:50 - 00065352 _____ () G:\Program Files (x86)\applord GmbH\ecoDMS - Client\ecoarchiveclient.dll
2012-04-10 15:42 - 2011-08-24 03:39 - 00081920 _____ () G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\koan\_ctypes.pyd
2012-04-10 15:42 - 2011-08-24 03:39 - 00053248 _____ () G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\Koan\_socket.pyd
2012-04-10 15:42 - 2011-08-24 03:39 - 00655360 _____ () G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\Koan\_ssl.pyd
2009-08-18 11:02 - 2009-08-18 11:02 - 00061952 _____ () G:\Program Files (x86)\BOINC\zlib1.dll
2015-02-01 12:17 - 2015-02-01 12:17 - 00039200 _____ () G:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () G:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () G:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:A303874F
AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: IGDCTRL => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Launch LAN USB Utility.exe.lnk => C:\Windows\pss\Launch LAN USB Utility.exe.lnk.CommonStartup
MSCONFIG\startupreg: LAN USB Utility => "C:\Program Files (x86)\Sharkoon\LAN USB Utility\LAN USB Utility.exe" /h
MSCONFIG\startupreg: MyKey => G:\Program Files (x86)\CHIPDRIVE\CHIPDRIVE MyKey\MyKey\MyKey.exe

==================== Accounts: =============================

Administrator (S-1-5-21-2149552335-4145356072-959976354-500 - Administrator - Enabled) => C:\Users\Administrator
ASPNET (S-1-5-21-2149552335-4145356072-959976354-1002 - Limited - Enabled)
Gast (S-1-5-21-2149552335-4145356072-959976354-501 - Limited - Enabled)
Holger (S-1-5-21-2149552335-4145356072-959976354-1000 - Administrator - Enabled) => C:\Users\Holger
HomeGroupUser$ (S-1-5-21-2149552335-4145356072-959976354-1021 - Limited - Enabled)
Test (S-1-5-21-2149552335-4145356072-959976354-1009 - Limited - Enabled)
__vmware_user__ (S-1-5-21-2149552335-4145356072-959976354-1013 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: O:\
Description: STORAGE DEVICE  
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Q:\
Description: STORAGE DEVICE  
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: M:\
Description: STORAGE DEVICE  
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Realtek PCI GBE Family Controller #2
Description: Realtek PCI GBE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: N:\
Description: STORAGE DEVICE  
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/03/2015 07:14:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/03/2015 07:12:43 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (03/03/2015 07:12:43 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (03/03/2015 07:12:43 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (03/03/2015 07:11:14 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: FATAL:  terminating connection due to administrator command

Error: (03/03/2015 07:11:14 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: FATAL:  terminating connection due to administrator command

Error: (03/03/2015 07:11:14 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: FATAL:  terminating connection due to administrator command

Error: (03/03/2015 07:11:14 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: FATAL:  terminating connection due to administrator command

Error: (03/03/2015 07:11:14 PM) (Source: PostgreSQL) (EventID: 0) (User: )
Description: FATAL:  terminating connection due to administrator command

Error: (03/03/2015 05:53:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/03/2015 07:15:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (03/03/2015 07:15:16 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 07:15:16 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 07:15:16 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 07:15:16 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 07:13:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (03/03/2015 05:55:53 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 05:55:53 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 05:55:53 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/03/2015 05:55:52 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422


Microsoft Office Sessions:
=========================
Error: (07/05/2011 07:11:54 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6557.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 45 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (01/03/2010 05:04:45 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4562 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2015-03-03 19:54:04.199
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 19:43:17.216
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 19:20:30.010
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 19:12:28.046
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 19:10:46.736
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 19:04:18.692
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 18:52:04.535
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 18:43:19.265
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 18:37:12.863
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-03 18:16:13.643
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Quad CPU Q9300 @ 2.50GHz
Percentage of memory in use: 56%
Total physical RAM: 4094.49 MB
Available physical RAM: 1789.44 MB
Total Pagefile: 12281.66 MB
Available Pagefile: 9563.42 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Windows7) (Fixed) (Total:194.22 GB) (Free:32 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (BOOT) (Fixed) (Total:74.53 GB) (Free:35.45 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data XP) (Fixed) (Total:298.68 GB) (Free:81.98 GB) NTFS
Drive g: (DataWindows7) (Fixed) (Total:63.47 GB) (Free:32.72 GB) NTFS
Drive h: (Temporary2) (Fixed) (Total:673.82 GB) (Free:611.83 GB) NTFS
Drive i: (GT-730FL-S_v3) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive l: (Temporary1) (Fixed) (Total:558.3 GB) (Free:546.64 GB) NTFS
Drive s: () (Network) (Total:1830.83 GB) (Free:1029.89 GB) 
Drive t: () (Network) (Total:1830.83 GB) (Free:321.89 GB) 
Drive w: () (Network) (Total:19223.53 GB) (Free:5573.92 GB) 
Drive x: () (Network) (Total:12927.97 GB) (Free:2338.84 GB) 
Drive y: () (Network) (Total:12927.97 GB) (Free:2338.84 GB) 
Drive z: () (Network) (Total:12927.97 GB) (Free:2338.84 GB) 

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 853C4862)
Partition 1: (Active) - (Size=194.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=63.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=673.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FAB30BFC)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298.7 GB) - (Type=05)
Partition 3: (Not Active) - (Size=558.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Vielen Dank im Vorraus!
Holger

hi,

Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe ()

Kennst Du das?

Norton schon mal neu installiert?

Ja, das ist ein online Frankiertool der Post.
Norton habe ich erneut installiert und aktuell läuft es auch fehlerfrei. Ich kann retrospektiv nicht sagen zu welchen Zeitpunkten (nach reboot, nach standby, etc.) Norton bei den letzten Malen ausgefallen ist. Es gab nie (!) eine Fehlermeldung diesbezüglich.

Gruss

Holger

Joah, Norton. Da gibt es im Netz ja genug Meinungen zu

Wenn's nur an Norton liegt, bin ich ja beruhigt und werde umgehend auf EmsiSoft umsteigen.

Mache mir aber Sorgen ob nicht doch was bösartiges dahinter steckt. Habe Norton schon viele Jahre und derartiges noch nie (!) erlebt. Andererseits sind bekanntermaßen neue Versionen einer Software nicht zwangsläufig besser und stabiler.

Also was tun? Weiter nach Malware suchen?

Gruß

Holger

Rest sieht aber gut aus

Ergo: Kein Hinweis auf Malware, Norton in die Tonne und Emisoft mit Windows Firewall?

Wäre mein Vorschlag, aber ich da nicht so objektiv weil ich bei Emsi arbeite, muss ich ja mal erwähnen

wusste ich

Vielen Dank!

Holger

Gern Geschehen