Win7 und Mozilla firefox: Unerwünschte Werbung bei jedem Klick und öffnen eines neues Fensters

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 02
Ran by Besitzer (administrator) on BESITZER-PC on 28-01-2014 11:20:49
Running from C:\Users\Besitzer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHVE.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe
(Dropbox, Inc.) C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Users\Besitzer\AppData\Roaming\BrowserCompanion\tbhcn.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(BitLeader) C:\Program Files (x86)\lg_fwupdate\fwupdate.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Acer Incoporated) C:\Program Files (x86)\Acer\Acer VCM\VC.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-05-25] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-04-23] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe [103720 2009-12-15] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UCam_Menu] - C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [LGODDFU] - C:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-12-07] (Bitleader)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [495616 2011-03-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [856064 2011-03-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [GoogleChromeAutoLaunch_1C5AC3501F46C7D54238099BA174D533] - C:\Users\Besitzer\AppData\Local\Google\Chrome\Application\chrome.exe [866584 2014-01-11] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-28] (Google Inc.)
HKCU\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHVE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
HKCU\...\Run: [NextLive] - C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
MountPoints2: {0a180fbd-6861-11e2-a9de-001e101f21c1} - D:\AutoRun.exe
MountPoints2: {3186a886-ef89-11e2-9867-5cac4cb052b5} - D:\AutoRun.exe
MountPoints2: {3186a8b5-ef89-11e2-9867-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {7976bf66-e339-11e2-945b-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {7976bf92-e339-11e2-945b-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {7976bf9f-e339-11e2-945b-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {7976bfaa-e339-11e2-945b-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {e0e0ec30-61a1-11e2-b3c0-60eb69562b39} - D:\AutoRun.exe
MountPoints2: {e0e0ec3f-61a1-11e2-b3c0-60eb69562b39} - D:\AutoRun.exe
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => File Not Found
AppInit_DLLs-x32: c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll => File Not Found
Startup: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tbhcn.lnk
ShortcutTarget: tbhcn.lnk -> C:\Users\Besitzer\AppData\Roaming\BrowserCompanion\tbhcn.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=hp&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=ds&q={searchTerms}&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=ds&q={searchTerms}&installDate={installDate}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388070937&from=cor&uid=WDCXWD7500BPVT-22HXZT1_WD-WX81C707171571715&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=ds&q={searchTerms}&installDate={installDate}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=ds&q={searchTerms}&installDate={installDate}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Feven 1.5 - {11111111-1111-1111-1111-110311851132} - C:\Program Files (x86)\Feven 1.5\Feven 1.5-bho64.dll (Feven)
BHO: Plus-HD-5.5 - {11111111-1111-1111-1111-110411901160} - C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-bho64.dll (Plus HD)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO-x32: Browser Companion Helper - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( )
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Feven 1.5 - {11111111-1111-1111-1111-110311851132} - C:\Program Files (x86)\Feven 1.5\Feven 1.5-bho.dll (Feven)
BHO-x32: Plus-HD-5.5 - {11111111-1111-1111-1111-110411901160} - C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-bho.dll (Plus HD)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Browser Companion Helper Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( )
BHO-x32: Show-Password - {c346ed58-d9c3-41be-8800-c9cad99730ac} - C:\Program Files (x86)\Show-Password\150.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: BrowseSmart - {ffbb88a9-c663-4b9b-9170-70fa0a5a2786} - C:\Program Files (x86)\BrowseSmart\BrowseSmartbho.dll (BrowseSmart)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default
FF NewTab: about:blank
FF SearchEngineOrder.1: Ask Search
FF Homepage: https://www.google.com/calendar/render?hl=de&pli=1|https://mail.google.com/mail/u/0/?tab=cm#search/ikea+bestellung/1438c4b7d5ea07ea
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=26b5a6b3-1eb6-b8e3-8e62-236b1be43c48&searchtype=ds&installDate=05/01/2014&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Besitzer\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Besitzer\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Feven 1.5 - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default\Extensions\249911bc-d1bd-4d66-8c17-df533609e6d8@c76f3de9-939e-4922-b73c-5d7a3139375d.com [2014-01-05]
FF Extension: Plus-HD-5.5 - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default\Extensions\e9043bba-bb1e-4491-8ff2-1ba673d54856@1d3800b4-5ed5-4f67-bf08-0d0c43a7b67b.com [2014-01-05]
FF Extension: No Name - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default\Extensions\staged [2014-01-28]
FF Extension: BrowseSmart - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\a39jah2m.default\Extensions\firefox@browsesmart.net.xpi [2013-12-06]
FF HKCU\...\Firefox\Extensions: [{eb3f00a3-e23d-4a67-b045-c42a873100e6}] - C:\Program Files (x86)\Show-Password\150.xpi
FF Extension: Show-Password - C:\Program Files (x86)\Show-Password\150.xpi [2013-12-31]

Chrome: 
=======
CHR Extension: (Snap.Do ) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl [2014-01-05]
CHR Extension: (Plus-HD-5.5) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aoilcbjfkbdplcfglkiedhefcomondlk [2014-01-04]
CHR Extension: (Feven 1.5) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\baodmgdpdoelldjmkhknbolcldnfjegg [2014-01-05]
CHR Extension: (Feven 1.5) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhphemoobgnikcoofkgackkaimpfmenm [2012-11-24]
CHR Extension: (Feven 1.5) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf [2012-11-24]
CHR Extension: (Feven 1.5) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2012-11-24]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Besitzer\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-30]
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx [2012-07-02]
CHR HKLM-x32\...\Chrome\Extension: [ippenodjaoidmkkfdlmdhofiebnpjddb] - C:\Program Files (x86)\BrowseSmart\ippenodjaoidmkkfdlmdhofiebnpjddb.crx [2013-12-06]
CHR HKLM-x32\...\Chrome\Extension: [logekkkdbdidmmcgkonmmonclldogceg] - C:\Program Files (x86)\Show-Password\150.crx [2013-12-31]
CHR StartMenuInternet: Google Chrome - C:\Users\Besitzer\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [821792 2010-06-11] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S2 Update BrowseSmart; C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe [102176 2014-01-26] ()
S2 Util BrowseSmart; C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe [102176 2014-01-26] ()
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-26] (Cherished Technololgy LIMITED)
S2 CltMngSvc; C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe [x]

==================== Drivers (Whitelisted) ====================

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-28 11:20 - 2014-01-28 11:21 - 00027133 _____ C:\Users\Besitzer\Desktop\FRST.txt
2014-01-28 11:20 - 2014-01-28 11:20 - 02079232 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-01-28 11:20 - 2014-01-28 11:20 - 00000000 ____D C:\FRST
2014-01-28 11:15 - 2014-01-28 11:16 - 00000478 _____ C:\Users\Besitzer\Desktop\defogger_disable.log
2014-01-28 11:15 - 2014-01-28 11:15 - 00000000 _____ C:\Users\Besitzer\defogger_reenable
2014-01-28 11:14 - 2014-01-28 11:14 - 00050477 _____ C:\Users\Besitzer\Desktop\Defogger.exe
2014-01-27 22:02 - 2014-01-27 22:02 - 00000000 ____D C:\08c2ecefdf2cef5f6a
2014-01-21 18:40 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-21 18:40 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-21 18:40 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-21 18:40 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-11 12:07 - 2014-01-11 12:07 - 00000000 ____D C:\ProgramData\Intel
2014-01-05 23:04 - 2014-01-05 23:04 - 00016849 _____ C:\Windows\SysWOW64\CCCInstall_201401052304312358.log
2014-01-05 23:02 - 2014-01-05 23:02 - 00001128 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-05 22:35 - 2014-01-28 10:40 - 00002058 _____ C:\Windows\Tasks\Feven 1.5-firefoxinstaller.job
2014-01-05 22:35 - 2014-01-28 10:35 - 00001986 _____ C:\Windows\Tasks\Feven 1.5-chromeinstaller.job
2014-01-05 22:35 - 2014-01-28 10:35 - 00001322 _____ C:\Windows\Tasks\Feven 1.5-updater.job
2014-01-05 22:35 - 2014-01-28 10:35 - 00001274 _____ C:\Windows\Tasks\Feven 1.5-codedownloader.job
2014-01-05 22:35 - 2014-01-28 10:35 - 00001146 _____ C:\Windows\Tasks\Feven 1.5-enabler.job
2014-01-05 22:35 - 2014-01-05 22:35 - 00004352 _____ C:\Windows\System32\Tasks\Feven 1.5-updater
2014-01-05 22:35 - 2014-01-05 22:35 - 00004304 _____ C:\Windows\System32\Tasks\Feven 1.5-codedownloader
2014-01-05 22:35 - 2014-01-05 22:35 - 00004176 _____ C:\Windows\System32\Tasks\Feven 1.5-enabler
2014-01-05 22:34 - 2014-01-05 22:35 - 00000000 ____D C:\Program Files (x86)\Feven 1.5
2014-01-04 22:05 - 2014-01-04 22:06 - 00000000 ____D C:\Users\Besitzer\Documents\Youcam
2014-01-04 22:04 - 2014-01-04 22:04 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-04 22:04 - 2014-01-04 22:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-04 22:03 - 2014-01-04 22:03 - 00000000 ____D C:\ProgramData\Oracle
2014-01-04 22:03 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-04 22:02 - 2014-01-04 22:02 - 00003156 _____ C:\Windows\System32\Tasks\{1686F416-AE39-49E2-9620-6B2ED7C51D9D}
2014-01-04 22:02 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-04 22:02 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-04 22:02 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-04 22:01 - 2014-01-04 22:02 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2014-01-04 14:51 - 2014-01-05 22:35 - 00001001 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2014-01-04 14:47 - 2014-01-04 14:47 - 00000000 ____D C:\Users\Besitzer\Documents\Optimizer Pro
2014-01-04 14:45 - 2014-01-26 13:19 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-04 14:45 - 2014-01-04 14:47 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Lollipop
2014-01-04 14:45 - 2014-01-04 14:46 - 00000000 ____D C:\de676bbcb1355591ec8537f4db5b28
2014-01-04 14:45 - 2014-01-04 14:45 - 00003496 _____ C:\Windows\System32\Tasks\UpdateVO
2014-01-04 14:45 - 2014-01-04 14:45 - 00001988 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-04 14:45 - 2014-01-04 14:45 - 00000552 _____ C:\Windows\KB893803v2.log
2014-01-04 14:45 - 2014-01-04 14:45 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\VOPackage
2014-01-04 14:44 - 2014-01-28 09:09 - 00001334 _____ C:\Windows\Tasks\Plus-HD-5.5-updater.job
2014-01-04 14:44 - 2014-01-28 09:09 - 00001158 _____ C:\Windows\Tasks\Plus-HD-5.5-enabler.job
2014-01-04 14:44 - 2014-01-05 22:44 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2014-01-04 14:44 - 2014-01-04 14:51 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2014-01-04 14:44 - 2014-01-04 14:44 - 00004364 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-updater
2014-01-04 14:44 - 2014-01-04 14:44 - 00004188 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-enabler
2014-01-04 14:44 - 2014-01-04 14:44 - 00000000 ____D C:\Users\Besitzer\AppData\Local\SearchProtect
2014-01-04 14:43 - 2014-01-28 09:09 - 00002132 _____ C:\Windows\Tasks\Plus-HD-5.5-firefoxinstaller.job
2014-01-04 14:43 - 2014-01-28 09:09 - 00002126 _____ C:\Windows\Tasks\Plus-HD-5.5-chromeinstaller.job
2014-01-04 14:43 - 2014-01-28 09:09 - 00001286 _____ C:\Windows\Tasks\Plus-HD-5.5-codedownloader.job
2014-01-04 14:43 - 2014-01-04 14:44 - 00004316 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-codedownloader
2014-01-04 14:43 - 2014-01-04 14:44 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.5
2014-01-02 12:05 - 2014-01-02 12:05 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\FileAdvisor
2013-12-31 02:21 - 2014-01-28 09:09 - 00000410 _____ C:\Windows\Tasks\Show-Password Update.job
2013-12-31 02:21 - 2013-12-31 02:21 - 00003064 _____ C:\Windows\System32\Tasks\Show-Password Update
2013-12-31 02:21 - 2013-12-31 02:21 - 00000000 ____D C:\Program Files (x86)\Show-Password
2013-12-31 02:20 - 2014-01-26 02:21 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-12-31 02:20 - 2013-12-31 02:20 - 00003536 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate
2013-12-31 02:20 - 2013-12-31 02:20 - 00003522 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-12-31 02:20 - 2013-12-31 02:20 - 00001119 _____ C:\Users\Besitzer\Desktop\Free M4a to MP3 Converter.lnk
2013-12-31 02:20 - 2013-12-31 02:20 - 00000000 ____D C:\Program Files (x86)\Free M4a to MP3 Converter

==================== One Month Modified Files and Folders =======

2014-01-28 11:21 - 2014-01-28 11:20 - 00027133 _____ C:\Users\Besitzer\Desktop\FRST.txt
2014-01-28 11:20 - 2014-01-28 11:20 - 02079232 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-01-28 11:20 - 2014-01-28 11:20 - 00000000 ____D C:\FRST
2014-01-28 11:17 - 2012-08-23 07:58 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Skype
2014-01-28 11:16 - 2014-01-28 11:15 - 00000478 _____ C:\Users\Besitzer\Desktop\defogger_disable.log
2014-01-28 11:15 - 2014-01-28 11:15 - 00000000 _____ C:\Users\Besitzer\defogger_reenable
2014-01-28 11:15 - 2012-07-15 21:04 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\BrowserCompanion
2014-01-28 11:15 - 2012-05-26 11:44 - 00000000 ____D C:\Users\Besitzer
2014-01-28 11:14 - 2014-01-28 11:14 - 00050477 _____ C:\Users\Besitzer\Desktop\Defogger.exe
2014-01-28 11:07 - 2012-05-26 10:53 - 01151250 _____ C:\Windows\WindowsUpdate.log
2014-01-28 11:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2014-01-28 11:06 - 2012-05-28 21:56 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000UA.job
2014-01-28 11:05 - 2012-09-30 23:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 10:40 - 2014-01-05 22:35 - 00002058 _____ C:\Windows\Tasks\Feven 1.5-firefoxinstaller.job
2014-01-28 10:35 - 2014-01-05 22:35 - 00001986 _____ C:\Windows\Tasks\Feven 1.5-chromeinstaller.job
2014-01-28 10:35 - 2014-01-05 22:35 - 00001322 _____ C:\Windows\Tasks\Feven 1.5-updater.job
2014-01-28 10:35 - 2014-01-05 22:35 - 00001274 _____ C:\Windows\Tasks\Feven 1.5-codedownloader.job
2014-01-28 10:35 - 2014-01-05 22:35 - 00001146 _____ C:\Windows\Tasks\Feven 1.5-enabler.job
2014-01-28 09:09 - 2014-01-04 14:44 - 00001334 _____ C:\Windows\Tasks\Plus-HD-5.5-updater.job
2014-01-28 09:09 - 2014-01-04 14:44 - 00001158 _____ C:\Windows\Tasks\Plus-HD-5.5-enabler.job
2014-01-28 09:09 - 2014-01-04 14:43 - 00002132 _____ C:\Windows\Tasks\Plus-HD-5.5-firefoxinstaller.job
2014-01-28 09:09 - 2014-01-04 14:43 - 00002126 _____ C:\Windows\Tasks\Plus-HD-5.5-chromeinstaller.job
2014-01-28 09:09 - 2014-01-04 14:43 - 00001286 _____ C:\Windows\Tasks\Plus-HD-5.5-codedownloader.job
2014-01-28 09:09 - 2013-12-31 02:21 - 00000410 _____ C:\Windows\Tasks\Show-Password Update.job
2014-01-28 09:09 - 2013-12-26 16:17 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-27 22:07 - 2012-05-28 21:56 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000Core.job
2014-01-27 22:02 - 2014-01-27 22:02 - 00000000 ____D C:\08c2ecefdf2cef5f6a
2014-01-27 22:02 - 2012-05-27 13:10 - 00002120 _____ C:\Windows\epplauncher.mif
2014-01-26 13:51 - 2012-12-07 22:08 - 00000344 _____ C:\Windows\lgfwup.ini
2014-01-26 13:51 - 2012-12-07 22:08 - 00000000 ____D C:\Program Files (x86)\lg_fwupdate
2014-01-26 13:24 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-26 13:24 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-26 13:19 - 2014-01-04 14:45 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-26 13:19 - 2012-05-26 11:46 - 00000000 ___RD C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-26 13:17 - 2012-05-29 17:48 - 00000000 ___RD C:\Users\Besitzer\Dropbox
2014-01-26 13:17 - 2012-05-29 17:45 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Dropbox
2014-01-26 13:15 - 2013-07-04 18:57 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-26 13:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-26 13:15 - 2009-07-14 05:51 - 00123421 _____ C:\Windows\setupact.log
2014-01-26 13:10 - 2012-05-27 18:02 - 00000000 ____D C:\A_privat
2014-01-26 10:59 - 2012-05-26 20:46 - 01352664 _____ C:\Windows\system32\perfh007.dat
2014-01-26 10:59 - 2012-05-26 20:46 - 00360012 _____ C:\Windows\system32\perfc007.dat
2014-01-26 10:59 - 2009-07-14 06:13 - 00006264 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-26 02:21 - 2013-12-31 02:20 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2014-01-23 11:45 - 2012-05-28 19:08 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 11:42 - 2012-09-30 23:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-23 11:42 - 2012-09-30 23:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-23 11:42 - 2012-09-30 23:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-23 11:38 - 2012-12-22 18:26 - 00001064 _____ C:\Windows\wininit.ini
2014-01-23 11:38 - 2012-05-29 17:45 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-23 11:32 - 2009-07-14 05:45 - 00413624 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-22 21:32 - 2012-05-27 12:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-19 08:33 - 2012-05-27 13:12 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-11 12:54 - 2013-10-17 11:04 - 00000000 ____D C:\Users\Besitzer\Desktop\Fotos drucken
2014-01-11 12:07 - 2014-01-11 12:07 - 00000000 ____D C:\ProgramData\Intel
2014-01-08 21:05 - 2012-10-02 09:11 - 00000000 ____D C:\Intel
2014-01-08 21:05 - 2010-07-02 12:23 - 00000000 ____D C:\Program Files (x86)\Intel
2014-01-08 20:55 - 2012-05-26 10:50 - 00101034 _____ C:\Windows\PFRO.log
2014-01-06 03:27 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-05 23:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-05 23:04 - 2014-01-05 23:04 - 00016849 _____ C:\Windows\SysWOW64\CCCInstall_201401052304312358.log
2014-01-05 23:04 - 2012-05-26 10:54 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2014-01-05 23:02 - 2014-01-05 23:02 - 00001128 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-05 22:55 - 2012-05-26 11:10 - 00000000 ____D C:\Program Files (x86)\Cyberlink
2014-01-05 22:55 - 2010-07-02 12:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-05 22:52 - 2010-07-02 12:41 - 00000000 ____D C:\Program Files (x86)\Acer GameZone
2014-01-05 22:51 - 2013-07-25 20:27 - 00000000 ____D C:\ProgramData\DatacardService
2014-01-05 22:44 - 2014-01-04 14:44 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2014-01-05 22:43 - 2013-12-26 16:17 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-05 22:35 - 2014-01-05 22:35 - 00004352 _____ C:\Windows\System32\Tasks\Feven 1.5-updater
2014-01-05 22:35 - 2014-01-05 22:35 - 00004304 _____ C:\Windows\System32\Tasks\Feven 1.5-codedownloader
2014-01-05 22:35 - 2014-01-05 22:35 - 00004176 _____ C:\Windows\System32\Tasks\Feven 1.5-enabler
2014-01-05 22:35 - 2014-01-05 22:34 - 00000000 ____D C:\Program Files (x86)\Feven 1.5
2014-01-05 22:35 - 2014-01-04 14:51 - 00001001 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2014-01-05 21:27 - 2013-12-26 16:17 - 00000204 _____ C:\Users\Besitzer\daemonprocess.txt
2014-01-04 22:06 - 2014-01-04 22:05 - 00000000 ____D C:\Users\Besitzer\Documents\Youcam
2014-01-04 22:05 - 2012-12-07 22:05 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\CyberLink
2014-01-04 22:05 - 2012-05-26 11:10 - 00000000 ____D C:\ProgramData\CyberLink
2014-01-04 22:04 - 2014-01-04 22:04 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-04 22:04 - 2014-01-04 22:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-04 22:04 - 2012-08-23 07:58 - 00000000 ____D C:\ProgramData\Skype
2014-01-04 22:03 - 2014-01-04 22:03 - 00000000 ____D C:\ProgramData\Oracle
2014-01-04 22:02 - 2014-01-04 22:02 - 00003156 _____ C:\Windows\System32\Tasks\{1686F416-AE39-49E2-9620-6B2ED7C51D9D}
2014-01-04 22:02 - 2014-01-04 22:01 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2014-01-04 22:02 - 2012-12-28 13:05 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-04 14:51 - 2014-01-04 14:44 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2014-01-04 14:49 - 2012-05-27 13:08 - 00006246 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-04 14:47 - 2014-01-04 14:47 - 00000000 ____D C:\Users\Besitzer\Documents\Optimizer Pro
2014-01-04 14:47 - 2014-01-04 14:45 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Lollipop
2014-01-04 14:46 - 2014-01-04 14:45 - 00000000 ____D C:\de676bbcb1355591ec8537f4db5b28
2014-01-04 14:45 - 2014-01-04 14:45 - 00003496 _____ C:\Windows\System32\Tasks\UpdateVO
2014-01-04 14:45 - 2014-01-04 14:45 - 00001988 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk
2014-01-04 14:45 - 2014-01-04 14:45 - 00000552 _____ C:\Windows\KB893803v2.log
2014-01-04 14:45 - 2014-01-04 14:45 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\VOPackage
2014-01-04 14:44 - 2014-01-04 14:44 - 00004364 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-updater
2014-01-04 14:44 - 2014-01-04 14:44 - 00004188 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-enabler
2014-01-04 14:44 - 2014-01-04 14:44 - 00000000 ____D C:\Users\Besitzer\AppData\Local\SearchProtect
2014-01-04 14:44 - 2014-01-04 14:43 - 00004316 _____ C:\Windows\System32\Tasks\Plus-HD-5.5-codedownloader
2014-01-04 14:44 - 2014-01-04 14:43 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.5
2014-01-02 12:05 - 2014-01-02 12:05 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\FileAdvisor
2013-12-31 18:10 - 2013-12-26 16:17 - 00000000 ____D C:\Users\Besitzer\AppData\Local\cache
2013-12-31 02:21 - 2013-12-31 02:21 - 00003064 _____ C:\Windows\System32\Tasks\Show-Password Update
2013-12-31 02:21 - 2013-12-31 02:21 - 00000000 ____D C:\Program Files (x86)\Show-Password
2013-12-31 02:20 - 2013-12-31 02:20 - 00003536 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate
2013-12-31 02:20 - 2013-12-31 02:20 - 00003522 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-12-31 02:20 - 2013-12-31 02:20 - 00001119 _____ C:\Users\Besitzer\Desktop\Free M4a to MP3 Converter.lnk
2013-12-31 02:20 - 2013-12-31 02:20 - 00000000 ____D C:\Program Files (x86)\Free M4a to MP3 Converter

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\0_Offer_3.exe
C:\Users\Besitzer\AppData\Local\Temp\1_Offer_8.exe
C:\Users\Besitzer\AppData\Local\Temp\6_Offer_15.exe
C:\Users\Besitzer\AppData\Local\Temp\BackupSetup.exe
C:\Users\Besitzer\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Besitzer\AppData\Local\Temp\DownloadManager.exe
C:\Users\Besitzer\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Besitzer\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe
C:\Users\Besitzer\AppData\Local\Temp\nsa5390.exe
C:\Users\Besitzer\AppData\Local\Temp\nsa62CE.exe
C:\Users\Besitzer\AppData\Local\Temp\nsb18D1.exe
C:\Users\Besitzer\AppData\Local\Temp\nsf94B.exe
C:\Users\Besitzer\AppData\Local\Temp\nsfDC33.exe
C:\Users\Besitzer\AppData\Local\Temp\nsfE29A.exe
C:\Users\Besitzer\AppData\Local\Temp\nsfFB2.exe
C:\Users\Besitzer\AppData\Local\Temp\nsk2B5.exe
C:\Users\Besitzer\AppData\Local\Temp\nsk5AD1.exe
C:\Users\Besitzer\AppData\Local\Temp\nsm262C.exe
C:\Users\Besitzer\AppData\Local\Temp\nsm467B.exe
C:\Users\Besitzer\AppData\Local\Temp\nsqEA24.exe
C:\Users\Besitzer\AppData\Local\Temp\nsqF78E.exe
C:\Users\Besitzer\AppData\Local\Temp\nsr33B4.exe
C:\Users\Besitzer\AppData\Local\Temp\nsr3E11.exe
C:\Users\Besitzer\AppData\Local\Temp\nsvD5DC.exe
C:\Users\Besitzer\AppData\Local\Temp\nsvF0AA.exe
C:\Users\Besitzer\AppData\Local\Temp\nsw1F19.exe
C:\Users\Besitzer\AppData\Local\Temp\ResetDevice.exe
C:\Users\Besitzer\AppData\Local\Temp\sblomktupjpbv.exe
C:\Users\Besitzer\AppData\Local\Temp\SearchProtectINT.exe
C:\Users\Besitzer\AppData\Local\Temp\Show-Password_1030-8101.exe
C:\Users\Besitzer\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Besitzer\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Besitzer\AppData\Local\Temp\ydlysekerzci.exe
C:\Users\Besitzer\AppData\Local\Temp\yhiagvicbojqgn.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-26 02:13

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014 02
Ran by Besitzer at 2014-01-28 11:22:00
Running from C:\Users\Besitzer\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
Acer Arcade Deluxe (x32 Version: 4.0.7615 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 4.0.7615 - CyberLink Corp.) Hidden
Acer Arcade Movie (x32 Version: 9.0.6423 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.63 - NewTech Infosystems)
Acer Crystal Eye webcam (x32 Version: 1.0.3.5 - Liteon)
Acer eRecovery Management (x32 Version: 4.05.3013 - Acer Incorporated)
Acer GameZone Console (x32 Version: 6.1.0.9 - Oberon Media, Inc.)
Acer PowerSmart Manager (x32 Version: 5.02.3004 - Acer Incorporated)
Acer Registration (x32 Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0222.2010 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated)
Acer VCM (x32 Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader X (10.1.5) (x32 Version: 10.1.5 - Adobe Systems Incorporated)
Albelli Fotobücher (HKCU Version:  - Albelli)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden
Amazon MP3-Downloader 1.0.9 (x32 Version:  - )
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23 - Atheros Communications Inc.)
ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.)
Backup Manager Basic (x32 Version: 2.0.0.63 - NewTech Infosystems) Hidden
Benutzerhandbuch EPSON BX635FWD Series (x32 Version:  - )
Bonjour (Version: 3.0.0.10 - Apple Inc.)
BrowserCompanion (x32 Version:  - ) <==== ATTENTION
BrowseSmart (Version: 2013.12.06.205904 - BrowseSmart) <==== ATTENTION
Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561 - ATI Technologies, Inc.) Hidden
dm-Fotowelt (x32 Version: 5.0.4 - CEWE COLOR AG u Co. OHG)
DMUninstaller (x32 Version:  - )
Download Navigator (x32 Version: 1.1.0 - SEIKO EPSON CORPORATION)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Druckerdeinstallation für EPSON BX635FWD Series (Version:  - SEIKO EPSON Corporation)
eBay Worldwide (x32 Version: 2.1.0901 - OEM)
Epson Connect Printer Setup (x32 Version: 1.1.1 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (x32 Version: 2.3.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (x32 Version: 2.50.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (x32 Version: 1.20.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (x32 Version:  - )
EPSON Printer Finder (x32 Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (x32 Version:  - Seiko Epson Corporation)
EpsonNet Print (x32 Version: 2.4j - SEIKO EPSON CORPORATION)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Feven 1.5 (x32 Version: 1.33.153.1 - Feven) <==== ATTENTION
File Type Advisor 1.0 (x32 Version:  - filetypeadvisor.com)
Free Audio Converter version 5.0.17.903 (x32 Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free M4a to MP3 Converter 8.0 (x32 Version:  - ManiacTools.com)
Free Studio version 5.7.4.918 (x32 Version: 5.7.4.918 - DVDVideoSoft Ltd.)
Google Chrome (HKCU Version: 32.0.1700.76 - Google Inc.)
Identity Card (x32 Version: 1.00.3003 - Acer Incorporated)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002 - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 4.0.7 - Acer Inc.)
LG Burning Tool (x32 Version: 6.2.5218a - CyberLink Corp.)
LG Burning Tool (x32 Version: 6.2.5218a - CyberLink Corp.) Hidden
LG CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.)
LG CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
LG CyberLink PowerBackup (x32 Version: 2.5.6023 - CyberLink Corp.)
LG CyberLink YouCam (x32 Version: 2.0.3718 - CyberLink Corp.)
LG CyberLink YouCam (x32 Version: 2.0.3718 - CyberLink Corp.) Hidden
LG ODD Auto Firmware Update (x32 Version: 10.01.0712.01 - )
Lollipop (HKCU Version:  - Lollipop Network, S.L.) <==== ATTENTION
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Media Go (x32 Version: 2.2.223 - Sony)
Media Go Video Playback Engine 1.92.163.06140 (x32 Version: 1.92.163.06140 - Sony)
MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden
Merriam Websters Spell Jam (x32 Version:  - Oberon Media)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8107.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.3.0219.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.0.0657.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.3.219.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
Netzwerkhandbuch EPSON BX635FWD Series (x32 Version:  - )
Norton Online Backup (x32 Version: 2.1.17869 - Symantec Corporation)
NTI Backup Now 5 (x32 Version: 5.1.2.630 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems) Hidden
OGA Notifier 2.0.0048.0 (x32 Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Optical Drive Power Management (x32 Version: 1.01.3007 - Acer Incorporated)
Picasa 3 (x32 Version: 3.8 - Google, Inc.)
PlayStation(R)Network Downloader (x32 Version: 2.07.00849 - Sony Computer Entertainment Inc.)
PlayStation(R)Store (x32 Version: 4.9.4.14625 - Sony Computer Entertainment Inc.)
Plus-HD-5.5 (x32 Version: 1.33.153.1 - Plus HD) <==== ATTENTION
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6096 - Realtek Semiconductor Corp.)
Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION
Show-Password (x32 Version:  - Show-Password LTD)
Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (Version: 14.0.6.0 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
VideoPlayer v2.0.6 (x32 Version: v2.0.6 - TUGUU SL)
VO Package (x32 Version: 1.0.0.0 - )
Welcome Center (x32 Version: 1.02.3002 - Acer Incorporated)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300 - Broadcom Corporation)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7304 - Buhl Data Service GmbH)
WPM17.8.0.3159 (x32 Version: 17.8.0.3159 - Cherished Technololgy LIMITED) <==== ATTENTION

==================== Restore Points  =========================

06-01-2014 02:00:11 Windows Update
08-01-2014 20:01:56 Windows Update
14-01-2014 08:06:12 Windows Update
21-01-2014 17:28:53 Windows Update
22-01-2014 20:29:58 Windows Update
25-01-2014 23:01:21 Windows Update
26-01-2014 02:00:13 Windows Update
27-01-2014 21:01:23 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1683D125-A2A8-49FB-9833-D59C40A47E73} - System32\Tasks\Feven 1.5-codedownloader => C:\Program Files (x86)\Feven 1.5\Feven 1.5-codedownloader.exe [2014-01-05] (Feven) <==== ATTENTION
Task: {24E1B2AA-E01F-4FAB-8D92-25D2A7C4799A} - System32\Tasks\Google Updater and Installer => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-28] (Google Inc.)
Task: {266CE6EA-850B-4A42-B4D0-12DF8C8509DB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000UA => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-28] (Google Inc.)
Task: {40DBDC8F-8E50-4E47-A13D-8F6BFF43B781} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {4CAA5A03-7D65-4A02-845A-2F30BD0F5C64} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-07-12] (File Type Advisor)
Task: {54E79B4F-4A44-4954-B907-173BB12B6F28} - System32\Tasks\Feven 1.5-updater => C:\Program Files (x86)\Feven 1.5\Feven 1.5-updater.exe [2014-01-05] (Feven) <==== ATTENTION
Task: {5D542F81-08D2-4805-96A1-FAC6C3B0E546} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {60AAC8A4-0B8D-4D1F-B10B-E5B5BD66D2B7} - System32\Tasks\Plus-HD-5.5-updater => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-updater.exe [2014-01-04] (Plus HD) <==== ATTENTION
Task: {64476BC6-7E9E-481F-8176-2A01C4B53727} - System32\Tasks\Plus-HD-5.5-codedownloader => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-codedownloader.exe [2014-01-04] (Plus HD) <==== ATTENTION
Task: {76126A09-CA4E-4E9B-B154-0811728EC7EA} - System32\Tasks\UpdateVO => C:\Users\Besitzer\AppData\Roaming\VOPackage\VOPackage.exe
Task: {7DC45391-8C53-431F-A841-30F98896637E} - System32\Tasks\{1686F416-AE39-49E2-9620-6B2ED7C51D9D} => Firefox.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {8521D3CF-0EB1-48F5-B3EF-D52E3A2F3238} - System32\Tasks\Plus-HD-5.5-chromeinstaller => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-chromeinstaller.exe [2014-01-04] (Plus HD) <==== ATTENTION
Task: {875BCA12-A166-40A1-8B57-C63F56F8BDC8} - System32\Tasks\Plus-HD-5.5-enabler => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-enabler.exe [2014-01-04] (Plus HD) <==== ATTENTION
Task: {8E04D07F-C18B-4FF0-A9AB-AE3ABD1BD905} - System32\Tasks\Feven 1.5-chromeinstaller => C:\Program Files (x86)\Feven 1.5\Feven 1.5-chromeinstaller.exe [2014-01-05] (Feven) <==== ATTENTION
Task: {AD0040FA-385C-4B54-8447-634F076425D3} - System32\Tasks\Show-Password Update => C:\Program Files (x86)\Show-Password\Show_Password.exe [2013-12-31] ()
Task: {BC556773-84E9-4E8B-87CF-B3A0931774B9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-23] (Adobe Systems Incorporated)
Task: {C355F147-270C-4D9A-98EC-09D24150BA44} - System32\Tasks\Plus-HD-5.5-firefoxinstaller => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-firefoxinstaller.exe [2014-01-04] (Plus HD) <==== ATTENTION
Task: {D956D2EE-AC3D-4EB0-A17C-53FAFAA2F86D} - System32\Tasks\Feven 1.5-firefoxinstaller => C:\Program Files (x86)\Feven 1.5\Feven 1.5-firefoxinstaller.exe [2014-01-05] (Feven) <==== ATTENTION
Task: {DE5E8F8D-F8F3-4104-BB8C-7F74AAE52C92} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-07-12] (filetypeadvisor.com                                         )
Task: {E32256D7-8ECA-4050-80B4-27E03C7970B6} - System32\Tasks\Feven 1.5-enabler => C:\Program Files (x86)\Feven 1.5\Feven 1.5-enabler.exe [2014-01-05] (Feven) <==== ATTENTION
Task: {F599DAF3-4AE2-4C86-89D3-618BB38A61B4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000Core => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-28] (Google Inc.)
Task: {F8DF93E0-C320-429D-B651-BACCF4306754} - System32\Tasks\Microsoft\Office Genuine Advantage\OGALogon => C:\Windows\system32\OGAExec.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Feven 1.5-chromeinstaller.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-codedownloader.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-enabler.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-firefoxinstaller.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 1.5-updater.job => C:\Program Files (x86)\Feven 1.5\Feven 1.5-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000Core.job => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1622139610-1442901321-1769941310-1000UA.job => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-5.5-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.5-codedownloader.job => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.5-enabler.job => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.5-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.5-updater.job => C:\Program Files (x86)\Plus-HD-5.5\Plus-HD-5.5-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Show-Password Update.job => C:\Program Files (x86)\Show-Password\Show_Password.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-03-26 10:46 - 2010-03-26 10:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-25 01:16 - 2010-05-25 01:16 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-05-25 01:09 - 2010-05-25 01:09 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2010-07-02 13:00 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2009-12-15 13:46 - 2009-12-15 13:46 - 00619816 _____ () C:\Program Files (x86)\Cyberlink\Power2Go\CLMediaLibrary.dll
2009-12-15 13:49 - 2009-12-15 13:49 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-06 03:57 - 2014-01-06 03:57 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\44bfa824a3b8a6f789fda79a2e01a8db\IsdiInterop.ni.dll
2010-07-02 12:24 - 2010-03-04 04:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-12-23 21:45 - 2013-12-23 21:45 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-23 11:42 - 2014-01-23 11:42 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\Users\Besitzer\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Besitzer\AppData\Roaming:NT

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: High Definition Audio-Controller
Description: High Definition Audio-Controller
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Standard-VGA-Grafikkarte
Description: Standard-VGA-Grafikkarte
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: vga
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/28/2014 11:05:21 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1229522

Error: (01/28/2014 11:05:21 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1229522

Error: (01/28/2014 11:05:21 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/28/2014 10:44:53 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2152

Error: (01/28/2014 10:44:53 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2152

Error: (01/28/2014 10:44:53 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/28/2014 10:44:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1014

Error: (01/28/2014 10:44:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1014

Error: (01/28/2014 10:44:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/28/2014 09:09:16 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 38861893


System errors:
=============
Error: (01/27/2014 10:03:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update for Microsoft Security Essentials - 4.4.304.0 (KB2902885)

Error: (01/26/2014 01:19:01 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Computer Backup (MyPC Backup)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/26/2014 01:17:05 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (01/26/2014 01:17:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Search Protect by Conduit Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (01/26/2014 01:17:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util BrowseSmart" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/26/2014 01:17:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Util BrowseSmart erreicht.

Error: (01/26/2014 01:16:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update BrowseSmart" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/26/2014 01:16:30 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Update BrowseSmart erreicht.

Error: (01/26/2014 01:15:22 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎26.‎01.‎2014 um 13:11:26 unerwartet heruntergefahren.

Error: (01/26/2014 03:02:55 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update for Microsoft Security Essentials - 4.4.304.0 (KB2902885)


Microsoft Office Sessions:
=========================
Error: (06/21/2013 04:24:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 28 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/18/2012 00:52:14 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 20792 seconds with 1740 seconds of active time.  This session ended with a crash.

Error: (06/27/2012 07:11:14 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2883 seconds with 2280 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-01-26 13:17:05.012
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-23 11:36:16.203
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-21 21:12:33.733
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-14 09:03:54.140
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-11 13:05:42.466
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-11 12:07:47.264
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-08 21:00:21.821
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-05 21:29:13.556
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-04 22:05:55.866
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-04 22:05:29.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 68%
Total physical RAM: 3766.69 MB
Available physical RAM: 1197.13 MB
Total Pagefile: 7531.55 MB
Available Pagefile: 4182.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:685.54 GB) (Free:505.05 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 58192CE0)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=686 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19355 - hxxp://www.gmer.net
Rootkit scan 2014-01-28 11:55:05
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD75 rev.01.0 698,64GB
Running: gmer.exe; Driver: C:\Users\Besitzer\AppData\Local\Temp\kxddikod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                                                                                                                                         fffff80003203000 45 bytes [43, 4D, 32, 35, 01, 00, 00, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575                                                                                                                                                                                                                         fffff8000320302f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- Threads - GMER 2.1 ----

Thread    C:\Windows\System32\svchost.exe [352:1516]                                                                                                                                                                                                                                                 000007fef94d59a0
Thread    C:\Windows\System32\svchost.exe [352:4584]                                                                                                                                                                                                                                                 000007fefcad1a70
Thread    C:\Windows\System32\svchost.exe [352:5412]                                                                                                                                                                                                                                                 000007fef9c1818c
Thread    C:\Windows\System32\svchost.exe [352:5548]                                                                                                                                                                                                                                                 000007fef10488f8
Thread    C:\Windows\System32\svchost.exe [352:5564]                                                                                                                                                                                                                                                 000007feecb0a2b0
Thread    C:\Windows\System32\svchost.exe [352:7008]                                                                                                                                                                                                                                                 000007feebaf3efc
Thread    C:\Windows\System32\svchost.exe [352:7056]                                                                                                                                                                                                                                                 000007feebc58a4c
Thread    C:\Windows\system32\svchost.exe [488:5356]                                                                                                                                                                                                                                                 000007fefab41ab0
Thread    C:\Windows\system32\svchost.exe [1324:1716]                                                                                                                                                                                                                                                000007fefcad1a70
Thread    C:\Windows\system32\svchost.exe [1324:1720]                                                                                                                                                                                                                                                000007fefcad1a70
Thread    C:\Windows\system32\svchost.exe [1324:1732]                                                                                                                                                                                                                                                000007fefcad1a70
Thread    C:\Windows\system32\svchost.exe [1324:1740]                                                                                                                                                                                                                                                000007fef8c62c70
Thread    C:\Windows\system32\svchost.exe [1324:1748]                                                                                                                                                                                                                                                000007fef8c6fb40
Thread    C:\Windows\system32\svchost.exe [1324:1760]                                                                                                                                                                                                                                                000007fef8c81d20
Thread    C:\Windows\system32\svchost.exe [1324:1764]                                                                                                                                                                                                                                                000007fef8c6f6f0
Thread    C:\Windows\system32\svchost.exe [1324:2188]                                                                                                                                                                                                                                                000007fef41135c0
Thread    C:\Windows\system32\svchost.exe [1324:4640]                                                                                                                                                                                                                                                000007fef4115600
Thread    C:\Windows\system32\svchost.exe [1324:5312]                                                                                                                                                                                                                                                000007feecdf2888
Thread    C:\Windows\system32\svchost.exe [1324:5324]                                                                                                                                                                                                                                                000007feed022940
Thread    C:\Windows\system32\svchost.exe [1324:2728]                                                                                                                                                                                                                                                000007feecdf2a40
Thread    C:\Windows\System32\spoolsv.exe [1616:1708]                                                                                                                                                                                                                                                000007fef79910c8
Thread    C:\Windows\System32\spoolsv.exe [1616:2052]                                                                                                                                                                                                                                                000007fef7956144
Thread    C:\Windows\System32\spoolsv.exe [1616:2056]                                                                                                                                                                                                                                                000007fef7745fd0
Thread    C:\Windows\System32\spoolsv.exe [1616:2060]                                                                                                                                                                                                                                                000007fef7733438
Thread    C:\Windows\System32\spoolsv.exe [1616:2064]                                                                                                                                                                                                                                                000007fef77463ec
Thread    C:\Windows\System32\spoolsv.exe [1616:2072]                                                                                                                                                                                                                                                000007fef88f5e5c
Thread    C:\Windows\System32\spoolsv.exe [1616:2076]                                                                                                                                                                                                                                                000007fef8925074
Thread    C:\Windows\system32\svchost.exe [2372:4252]                                                                                                                                                                                                                                                000007fef00044e0
Thread    C:\Windows\System32\svchost.exe [5844:6628]                                                                                                                                                                                                                                                000007fef85c5170
Thread    C:\Windows\System32\svchost.exe [5844:8056]                                                                                                                                                                                                                                                000007fef97f9874
---- Processes - GMER 2.1 ----

Library   c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8F114894-FED8-4945-BF0C-49923FA4167B}\mpengine.dll (*** suspicious ***) @ c:\Program Files\Microsoft Security Client\MsMpEng.exe [864] (Microsoft Malware Protection Engine/Microsoft Corporation(2014-01-27 21:11:20)  000007fef2bd0000
Process   C:\ProgramData\WPM\wprotectmanager.exe (*** suspicious ***) @ C:\ProgramData\WPM\wprotectmanager.exe [1568]                                                                                                                                                                                0000000000290000
Library   C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll (*** suspicious ***) @ C:\Windows\SysWOW64\rundll32.exe [3088]                                                                                                                                                                    000000006df60000
Process   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe (*** suspicious ***) @ C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe [3888]                                                                                                                                          0000000000400000
Library   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe [3888]                                                                                                                                     00000000040b0000
Library   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe [3888](2013-10-18 23:55:02)                                                                                                                      0000000064ca0000
Library   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\Dropbox.exe [3888]                                                                                                                                            00000000632f0000
Process   C:\Users\Besitzer\AppData\Roaming\BrowserCompanion\tbhcn.exe (*** suspicious ***) @ C:\Users\Besitzer\AppData\Roaming\BrowserCompanion\tbhcn.exe [3972]                                                                                                                                    0000000000980000
Library   \\?\C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv_SID_S-1-5-20\Indiv01_64.key (*** suspicious ***) @ C:\Program Files\Windows Media Player\wmpnetwk.exe [3280] (Individualized Black Box DLL/Microsoft Corporation SIGNED)(2013-12-25 12:10:21)                                         000000000ac00000
Library   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\explorer.exe [6280]                                                                                                                                                                    000007fefbc60000
Library   C:\Users\Besitzer\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Program Files\WinRAR\WinRAR.exe [7108]                                                                                                                                                         000007fefbc60000
Process   C:\Users\Besitzer\AppData\Local\Temp\Rar$EXa0.971\gmer.exe (*** suspicious ***) @ C:\Users\Besitzer\AppData\Local\Temp\Rar$EXa0.971\gmer.exe [6396](2014-01-28 10:37:27)                                                                                                                   0000000000400000

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c44619ccd45b                                                                                                                                                                                                                
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c44619ccd45b (not active ControlSet)                                                                                                                                                                                            

---- EOF - GMER 2.1 ----
         

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:16 on 28/01/2014 (Besitzer)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-