Hallo Leute,

ich habe mir heute Morgen den "Free M4a to MP3 Converter" von Chip runtergeladen und installiert. Als ich daraufhin den Chrome-Browser geöffnet habe, hat sich eine iminent-toolbar eingeschlichen und es haben sich immer wieder mal Pop-Ups zu bonprix.de und irgend eine adblock seite geöffnet.

Den "Free M4a to MP3 Converter" habe ich natürlich gleich wieder gelöscht. Anschließend habe ich mein System mit SUPERAntiSpyware, Malwarebytes Anti-Malware und Adware Cleaner gescannt und "gesäubert". Chrome habe ich auch gelöscht und neu installiert.
Auf den ersten Blick war alles weg. Nach wenigen Minuten im Chrome Browser kam wieder diese iminent-toolbar bzw. startseite.
Auf Chip.de steht übrigens: " Vorsicht: "Free M4a to MP3 Converter" kommt mit Adware auf Ihren Rechner. Um zu verhindern, dass weitere Zusatz-Software wie eine Toolbar inklusive Suchmaschine mitinstalliert wird, deaktivieren Sie diese Optionen während der Installation."

Habe ich leider zu spät gelesen.

Ich hoffe es kann mir jemand helfen.

Hier noch die Logfiles:
FRST.TXT

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Runo (administrator) on RUNO-PC on 05-04-2014 18:32:42
Running from C:\Users\Runo\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Guillemot Corporation S.A.) C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks\sldworks_fs.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [CamserviceExchange] - C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe [3382568 2011-09-07] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] - [X]
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-02-18] (Microsoft Corporation)
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [] - [X]
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6563608 2014-01-06] (SUPERAntiSpyware)
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\MountPoints2: {0270595a-98d5-11e3-8f5b-90fba6483d79} - Iomega Encryption Utility.exe
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60B1E2EBAB2CCF01
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-05]
CHR Extension: (Google Drive) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-05]
CHR Extension: (Regentropfen) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcipapbfhdnmgihoimbjiadmhpcgcnil [2014-04-05]
CHR Extension: (YouTube) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-05]
CHR Extension: (Google-Suche) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-05]
CHR Extension: (AdBlock) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-05]
CHR Extension: (Stealthy) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2014-04-05]
CHR Extension: (Google Wallet) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-05]
CHR Extension: (Proxy List - Proxies and Privacy Tools) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\omihnninlhneakfglooiofgdbpmnhjgn [2014-04-05]
CHR Extension: (Google Mail) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-05]

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-11] (SUPERAntiSpyware.com)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-19] (Disc Soft Ltd)
S3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation)
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 OXSDIDRV_x64; C:\Windows\System32\DRIVERS\OXSDIDRV_x64.sys [51760 2009-09-28] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
S3 cpuz134; \??\C:\Users\Runo\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 18:32 - 2014-04-05 18:33 - 00011315 _____ () C:\Users\Runo\Downloads\FRST.txt
2014-04-05 18:32 - 2014-04-05 18:32 - 00000000 ____D () C:\FRST
2014-04-05 18:31 - 2014-04-05 18:31 - 00000470 _____ () C:\Users\Runo\Downloads\defogger_disable.log
2014-04-05 18:31 - 2014-04-05 18:31 - 00000000 _____ () C:\Users\Runo\defogger_reenable
2014-04-05 18:17 - 2014-04-05 18:17 - 02157056 _____ (Farbar) C:\Users\Runo\Downloads\FRST64.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00380416 _____ () C:\Users\Runo\Downloads\Gmer-19357.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00050477 _____ () C:\Users\Runo\Downloads\Defogger.exe
2014-04-05 18:07 - 2014-04-05 18:07 - 00000312 _____ () C:\Windows\PFRO.log
2014-04-05 18:07 - 2014-04-05 18:07 - 00000168 _____ () C:\Windows\setupact.log
2014-04-05 18:07 - 2014-04-05 18:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-05 18:00 - 2014-04-05 18:00 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 17:58 - 2014-04-05 17:58 - 01038974 _____ (Thisisu) C:\Users\Runo\Downloads\JRT.exe
2014-04-05 17:50 - 2014-04-05 17:50 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-05 16:11 - 2014-04-05 17:39 - 00000000 ____D () C:\AdwCleaner
2014-04-05 16:11 - 2014-04-05 16:11 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner (1).exe
2014-04-05 16:09 - 2014-04-05 16:09 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner.exe
2014-04-05 11:44 - 2014-04-05 18:14 - 00000280 _____ () C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job
2014-04-05 11:44 - 2014-04-05 11:44 - 00003248 _____ () C:\Windows\System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}
2014-04-05 11:44 - 2014-04-05 11:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-05 11:43 - 2014-04-05 11:43 - 00003514 _____ () C:\Windows\System32\Tasks\FileAdvisorCheck
2014-04-05 11:43 - 2014-04-05 11:43 - 00003512 _____ () C:\Windows\System32\Tasks\FileAdvisorUpdate
2014-04-05 11:43 - 2014-04-05 11:43 - 00000000 ____D () C:\Program Files (x86)\File Type Advisor
2014-04-04 21:27 - 2014-04-04 21:27 - 00000000 ____D () C:\install
2014-04-04 20:46 - 2014-04-04 20:46 - 00000000 ____D () C:\Users\Runo\Documents\Vault Workspace
2014-04-04 19:31 - 2014-04-04 19:31 - 00001945 _____ () C:\Users\Runo\Desktop\prototyp - Verknüpfung.lnk
2014-04-04 19:28 - 2014-04-04 21:37 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft WSE 3.0
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-04 19:26 - 2014-04-04 21:52 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-04-04 19:26 - 2014-04-04 21:52 - 00000000 ____D () C:\Program Files\Autodesk
2014-04-04 19:25 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-04-04 19:23 - 2014-04-04 20:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Autodesk
2014-04-04 18:08 - 2014-04-04 18:28 - 1235528969 _____ (Autodesk, Inc.) C:\Users\Runo\Downloads\Autodesk_Simulation_CFD_2014_Multilingual_Win_64bit_dlm.sfx.exe
2014-04-03 22:09 - 2014-04-03 22:10 - 00000000 _____ () C:\Users\Runo\AppData\Local\Temptable.xml
2014-04-02 21:14 - 2014-04-02 21:14 - 00000287 _____ () C:\Users\Runo\Downloads\dirk_ringhand.vcf
2014-04-02 21:04 - 2014-04-02 21:04 - 00000000 ____D () C:\ProgramData\MentorGraphics
2014-03-30 23:59 - 2014-04-05 17:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Winamp
2014-03-30 23:59 - 2014-03-30 23:59 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-03-30 23:51 - 2014-03-31 21:54 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 12.0 Projekte
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files\Sony
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-03-30 23:24 - 2014-03-30 23:24 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Publish Providers
2014-03-30 23:23 - 2014-03-30 23:23 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 13.0 Projects
2014-03-30 23:21 - 2014-03-31 20:22 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Sony
2014-03-30 23:21 - 2014-03-30 23:50 - 00000000 ____D () C:\Users\Runo\AppData\Local\Sony
2014-03-30 23:21 - 2014-03-30 23:21 - 00000000 ____D () C:\ProgramData\Sony
2014-03-30 22:36 - 2014-03-30 23:04 - 185831992 _____ (Sony Creative Software Inc.) C:\Users\Runo\Downloads\moviestudiope12.0.334_64bit.exe
2014-03-30 22:16 - 2014-03-30 23:13 - 351219000 _____ (Sony Creative Software Inc.) C:\Users\Runo\Downloads\moviestudiope13.0.879_64-bit.exe
2014-03-30 20:25 - 2014-03-30 20:25 - 00020711 _____ () C:\Users\Runo\AppData\Local\recently-used.xbel
2014-03-28 23:39 - 2014-04-04 19:32 - 00000199 _____ () C:\Users\Runo\Desktop\Neues Textdokument.txt
2014-03-26 22:05 - 2014-03-26 22:05 - 05962953 _____ () C:\Users\Runo\Downloads\01+The+Conversation.m4a.mp4
2014-03-24 21:47 - 2014-03-24 21:47 - 00002487 _____ () C:\Users\Public\Desktop\CATIA P3 V5R19.lnk
2014-03-24 21:41 - 2014-03-24 21:41 - 00000000 ____D () C:\Program Files (x86)\Dassault Systemes
2014-03-24 01:59 - 2014-03-24 01:59 - 00000000 ____D () C:\Windows\HerculesWebcamUpdater
2014-03-24 01:59 - 2011-06-27 11:31 - 00589824 _____ (Guillemot Corporation S.A.) C:\Windows\SysWOW64\HWLMSET2.exe
2014-03-24 01:59 - 2011-06-27 11:31 - 00009728 _____ () C:\Windows\SysWOW64\HWLMSET2PS.dll
2014-03-24 01:59 - 2009-04-22 16:46 - 03552384 _____ () C:\Windows\system32\Drivers\snp2uvc.sys
2014-03-24 01:59 - 2009-02-09 01:43 - 00111104 _____ (Guillemot Corporation) C:\Windows\system32\Drivers\hxctlflt.sys
2014-03-24 01:59 - 2008-08-21 17:15 - 00179712 _____ ( ) C:\Windows\system32\rsnp2uvc.dll
2014-03-24 01:59 - 2008-08-20 19:05 - 00361472 _____ (Sonix) C:\Windows\system32\vsnp2uvc.dll
2014-03-24 01:59 - 2008-08-20 19:04 - 00291328 _____ (Sonix) C:\Windows\SysWOW64\vsnp2uvc.dll
2014-03-24 01:59 - 2008-07-16 11:59 - 00035840 _____ () C:\Windows\system32\Drivers\sncduvc.sys
2014-03-24 01:59 - 2007-07-04 18:28 - 00301056 _____ ( ) C:\Windows\system32\csnp2uvc.dll
2014-03-24 01:59 - 2006-05-19 12:53 - 00013022 _____ () C:\Windows\snp2uvc.src
2014-03-24 01:59 - 2006-05-19 12:39 - 00015497 _____ () C:\Windows\snp2uvc.ini
2014-03-24 01:47 - 2014-04-05 11:22 - 00008704 _____ () C:\Users\Runo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-24 01:47 - 2014-03-24 01:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Solveig Multimedia
2014-03-24 01:45 - 2014-04-05 10:49 - 00000000 ____D () C:\Users\Runo\Documents\HyperCam3
2014-03-24 01:45 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\HyperCam
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\EDrawings
2014-03-23 19:38 - 2014-03-23 19:38 - 00468168 _____ () C:\Users\Runo\Downloads\seq_2_gd_divx.avi
2014-03-22 15:20 - 2014-03-22 15:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-22 15:20 - 2014-03-22 15:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-22 15:20 - 2014-03-22 15:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-22 11:34 - 2014-03-22 11:34 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-22 11:34 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-22 03:34 - 2014-03-22 03:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SUPERAntiSpyware.com
2014-03-22 03:33 - 2014-03-22 03:34 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-22 03:33 - 2014-03-22 03:33 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-03-22 03:33 - 2014-03-22 03:33 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-22 02:42 - 2014-04-05 17:48 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-03-22 02:42 - 2014-03-22 02:42 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-03-21 20:11 - 2014-03-21 20:11 - 00001528 _____ () C:\Users\Runo\Desktop\Lernfabrik.lnk
2014-03-18 22:54 - 2014-03-18 22:54 - 00000000 ____D () C:\Users\Runo\Documents\Nokia Suite
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2014-03-18 22:46 - 2014-03-18 22:53 - 00000000 ____D () C:\Users\Runo\AppData\Local\NokiaAccount
2014-03-18 22:41 - 2014-03-18 22:53 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\PC Suite
2014-03-18 22:41 - 2014-03-18 22:46 - 00000000 ____D () C:\Users\Runo\AppData\Local\Nokia
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\PC Suite
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\Nokia
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files\DIFX
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2014-03-18 22:40 - 2013-01-23 11:31 - 00057856 _____ (Nokia) C:\Windows\system32\nmwcdclsX64.dll
2014-03-18 22:40 - 2012-10-17 15:53 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys
2014-03-18 22:36 - 2014-03-18 22:41 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-03-18 22:36 - 2014-03-18 22:36 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2014-03-14 02:12 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 02:12 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 02:12 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 02:12 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 02:12 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 02:12 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 02:12 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 02:12 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 02:12 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 02:12 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 02:12 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 02:12 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 02:12 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-14 02:12 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 02:12 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 02:12 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-14 02:12 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 02:12 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 02:12 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-14 02:12 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-14 02:12 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-14 02:12 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-14 02:12 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-14 02:12 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 02:12 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 02:12 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-14 02:12 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-14 02:12 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 02:12 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 02:12 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-14 02:12 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-14 02:12 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 02:12 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-14 02:12 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-14 02:12 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-14 02:12 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 02:12 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-14 02:12 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-14 02:12 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 02:12 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-14 01:38 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 01:38 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 01:38 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-14 01:37 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 01:35 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 01:35 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-14 01:30 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-14 01:30 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 18:05 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-11 18:05 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

==================== One Month Modified Files and Folders =======

2014-04-05 18:33 - 2014-04-05 18:32 - 00011315 _____ () C:\Users\Runo\Downloads\FRST.txt
2014-04-05 18:32 - 2014-04-05 18:32 - 00000000 ____D () C:\FRST
2014-04-05 18:32 - 2014-02-19 11:47 - 00000000 ____D () C:\Users\Runo\Documents\Outlook-Dateien
2014-04-05 18:31 - 2014-04-05 18:31 - 00000470 _____ () C:\Users\Runo\Downloads\defogger_disable.log
2014-04-05 18:31 - 2014-04-05 18:31 - 00000000 _____ () C:\Users\Runo\defogger_reenable
2014-04-05 18:31 - 2014-02-18 14:54 - 00000000 ____D () C:\Users\Runo
2014-04-05 18:17 - 2014-04-05 18:17 - 02157056 _____ (Farbar) C:\Users\Runo\Downloads\FRST64.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00380416 _____ () C:\Users\Runo\Downloads\Gmer-19357.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00050477 _____ () C:\Users\Runo\Downloads\Defogger.exe
2014-04-05 18:14 - 2014-04-05 11:44 - 00000280 _____ () C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job
2014-04-05 18:14 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-05 18:14 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-05 18:12 - 2009-07-14 19:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-04-05 18:12 - 2009-07-14 19:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-04-05 18:12 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-05 18:11 - 2014-02-18 14:53 - 00297521 _____ () C:\Windows\WindowsUpdate.log
2014-04-05 18:07 - 2014-04-05 18:07 - 00000312 _____ () C:\Windows\PFRO.log
2014-04-05 18:07 - 2014-04-05 18:07 - 00000168 _____ () C:\Windows\setupact.log
2014-04-05 18:07 - 2014-04-05 18:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-05 18:07 - 2014-02-18 20:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-05 18:07 - 2014-02-18 19:43 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 18:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-05 18:03 - 2014-02-18 19:43 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-05 18:00 - 2014-04-05 18:00 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 17:58 - 2014-04-05 17:58 - 01038974 _____ (Thisisu) C:\Users\Runo\Downloads\JRT.exe
2014-04-05 17:50 - 2014-04-05 17:50 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-05 17:50 - 2014-02-18 19:43 - 00000000 ____D () C:\Users\Runo\AppData\Local\Google
2014-04-05 17:50 - 2014-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-05 17:48 - 2014-03-22 02:42 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-04-05 17:47 - 2014-03-30 23:59 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Winamp
2014-04-05 17:39 - 2014-04-05 16:11 - 00000000 ____D () C:\AdwCleaner
2014-04-05 16:11 - 2014-04-05 16:11 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner (1).exe
2014-04-05 16:09 - 2014-04-05 16:09 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner.exe
2014-04-05 11:52 - 2014-02-18 22:25 - 00000000 ____D () C:\Users\Runo\Desktop\shortcuts
2014-04-05 11:44 - 2014-04-05 11:44 - 00003248 _____ () C:\Windows\System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}
2014-04-05 11:44 - 2014-04-05 11:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-05 11:43 - 2014-04-05 11:43 - 00003514 _____ () C:\Windows\System32\Tasks\FileAdvisorCheck
2014-04-05 11:43 - 2014-04-05 11:43 - 00003512 _____ () C:\Windows\System32\Tasks\FileAdvisorUpdate
2014-04-05 11:43 - 2014-04-05 11:43 - 00000000 ____D () C:\Program Files (x86)\File Type Advisor
2014-04-05 11:38 - 2014-02-27 21:12 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DVDVideoSoft
2014-04-05 11:38 - 2014-02-27 21:12 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-04-05 11:22 - 2014-03-24 01:47 - 00008704 _____ () C:\Users\Runo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-05 10:49 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\Documents\HyperCam3
2014-04-05 01:48 - 2014-02-20 01:51 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\vlc
2014-04-04 21:52 - 2014-04-04 19:26 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-04-04 21:52 - 2014-04-04 19:26 - 00000000 ____D () C:\Program Files\Autodesk
2014-04-04 21:37 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-04-04 21:36 - 2014-02-20 01:48 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-04-04 21:27 - 2014-04-04 21:27 - 00000000 ____D () C:\install
2014-04-04 21:19 - 2014-02-19 11:12 - 00000000 ____D () C:\Users\Runo\Sonstige
2014-04-04 20:47 - 2014-04-04 19:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Autodesk
2014-04-04 20:46 - 2014-04-04 20:46 - 00000000 ____D () C:\Users\Runo\Documents\Vault Workspace
2014-04-04 20:44 - 2014-02-19 14:52 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SolidWorks
2014-04-04 20:40 - 2014-02-21 20:27 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Skype
2014-04-04 20:22 - 2014-02-22 13:29 - 00000000 ____D () C:\Users\Runo\AppData\Local\TempSWSicherungsverzeichnis
2014-04-04 19:32 - 2014-03-28 23:39 - 00000199 _____ () C:\Users\Runo\Desktop\Neues Textdokument.txt
2014-04-04 19:31 - 2014-04-04 19:31 - 00001945 _____ () C:\Users\Runo\Desktop\prototyp - Verknüpfung.lnk
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft WSE 3.0
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-04 19:28 - 2014-02-19 09:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-04 18:28 - 2014-04-04 18:08 - 1235528969 _____ (Autodesk, Inc.) C:\Users\Runo\Downloads\Autodesk_Simulation_CFD_2014_Multilingual_Win_64bit_dlm.sfx.exe
2014-04-03 22:10 - 2014-04-03 22:09 - 00000000 _____ () C:\Users\Runo\AppData\Local\Temptable.xml
2014-04-02 21:14 - 2014-04-02 21:14 - 00000287 _____ () C:\Users\Runo\Downloads\dirk_ringhand.vcf
2014-04-02 21:04 - 2014-04-02 21:04 - 00000000 ____D () C:\ProgramData\MentorGraphics
2014-03-31 21:54 - 2014-03-30 23:51 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 12.0 Projekte
2014-03-31 20:22 - 2014-03-30 23:21 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Sony
2014-03-30 23:59 - 2014-03-30 23:59 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-03-30 23:51 - 2014-02-22 13:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\NVIDIA
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files\Sony
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-03-30 23:50 - 2014-03-30 23:21 - 00000000 ____D () C:\Users\Runo\AppData\Local\Sony
2014-03-30 23:24 - 2014-03-30 23:24 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Publish Providers
2014-03-30 23:23 - 2014-03-30 23:23 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 13.0 Projects
2014-03-30 23:21 - 2014-03-30 23:21 - 00000000 ____D () C:\ProgramData\Sony
2014-03-30 23:13 - 2014-03-30 22:16 - 351219000 _____ (Sony Creative Software Inc.) C:\Users\Runo\Downloads\moviestudiope13.0.879_64-bit.exe
2014-03-30 23:04 - 2014-03-30 22:36 - 185831992 _____ (Sony Creative Software Inc.) C:\Users\Runo\Downloads\moviestudiope12.0.334_64bit.exe
2014-03-30 20:26 - 2014-02-23 13:01 - 00000000 ____D () C:\Users\Runo\.gimp-2.8
2014-03-30 20:25 - 2014-03-30 20:25 - 00020711 _____ () C:\Users\Runo\AppData\Local\recently-used.xbel
2014-03-29 23:02 - 2014-02-21 20:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-28 21:50 - 2014-02-18 22:46 - 00000000 ____D () C:\Users\Runo\Textdokumente
2014-03-28 00:58 - 2014-02-18 19:43 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-28 00:58 - 2014-02-18 19:43 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-27 23:49 - 2014-02-23 13:45 - 00000000 ____D () C:\Users\Runo\AppData\Local\gtk-2.0
2014-03-26 22:05 - 2014-03-26 22:05 - 05962953 _____ () C:\Users\Runo\Downloads\01+The+Conversation.m4a.mp4
2014-03-25 09:04 - 2014-02-18 19:58 - 00127608 _____ () C:\Users\Runo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-25 08:56 - 2009-07-14 06:45 - 00454456 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-25 02:18 - 2014-02-19 16:12 - 00000000 ____D () C:\Users\Runo\AppData\Local\DassaultSystemes
2014-03-24 21:48 - 2009-07-14 04:34 - 00017708 _____ () C:\Windows\system32\Drivers\etc\services
2014-03-24 21:47 - 2014-03-24 21:47 - 00002487 _____ () C:\Users\Public\Desktop\CATIA P3 V5R19.lnk
2014-03-24 21:41 - 2014-03-24 21:41 - 00000000 ____D () C:\Program Files (x86)\Dassault Systemes
2014-03-24 21:41 - 2014-02-19 16:12 - 00000000 ____D () C:\ProgramData\DassaultSystemes
2014-03-24 21:40 - 2014-02-19 16:12 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DassaultSystemes
2014-03-24 01:59 - 2014-03-24 01:59 - 00000000 ____D () C:\Windows\HerculesWebcamUpdater
2014-03-24 01:59 - 2014-02-21 20:53 - 00000000 ____D () C:\Program Files (x86)\Hercules
2014-03-24 01:47 - 2014-03-24 01:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Solveig Multimedia
2014-03-24 01:45 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\HyperCam
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\EDrawings
2014-03-23 19:38 - 2014-03-23 19:38 - 00468168 _____ () C:\Users\Runo\Downloads\seq_2_gd_divx.avi
2014-03-22 15:23 - 2014-02-19 02:17 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DAEMON Tools Lite
2014-03-22 15:23 - 2014-02-18 14:45 - 00000000 ____D () C:\Windows\Panther
2014-03-22 15:20 - 2014-03-22 15:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-22 15:20 - 2014-03-22 15:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-22 15:20 - 2014-03-22 15:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-22 13:20 - 2014-02-18 20:49 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-22 11:34 - 2014-03-22 11:34 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-22 03:34 - 2014-03-22 03:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SUPERAntiSpyware.com
2014-03-22 03:34 - 2014-03-22 03:33 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-22 03:33 - 2014-03-22 03:33 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-03-22 03:33 - 2014-03-22 03:33 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-22 02:43 - 2014-02-18 14:54 - 00000000 ____D () C:\Users\Runo\AppData\Local\VirtualStore
2014-03-22 02:42 - 2014-03-22 02:42 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-03-22 02:35 - 2014-02-19 23:13 - 00000000 ____D () C:\Users\Runo\JLoads
2014-03-21 20:11 - 2014-03-21 20:11 - 00001528 _____ () C:\Users\Runo\Desktop\Lernfabrik.lnk
2014-03-21 15:46 - 2014-02-19 21:04 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-19 01:43 - 2014-02-18 19:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 01:40 - 2014-02-18 19:32 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-18 22:54 - 2014-03-18 22:54 - 00000000 ____D () C:\Users\Runo\Documents\Nokia Suite
2014-03-18 22:53 - 2014-03-18 22:46 - 00000000 ____D () C:\Users\Runo\AppData\Local\NokiaAccount
2014-03-18 22:53 - 2014-03-18 22:41 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\PC Suite
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2014-03-18 22:46 - 2014-03-18 22:41 - 00000000 ____D () C:\Users\Runo\AppData\Local\Nokia
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\PC Suite
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\Nokia
2014-03-18 22:41 - 2014-03-18 22:36 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files\DIFX
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2014-03-18 22:36 - 2014-03-18 22:36 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2014-03-17 22:22 - 2014-02-19 22:27 - 00000000 ___RD () C:\Users\Runo\Dropbox
2014-03-17 22:20 - 2014-02-19 22:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Dropbox
2014-03-14 10:17 - 2014-02-19 12:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 10:17 - 2014-02-19 12:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\Runo\AppData\Local\Temp\AcDeltree.exe
C:\Users\Runo\AppData\Local\Temp\avgnt.exe
C:\Users\Runo\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpqebnfj.dll
C:\Users\Runo\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Runo\AppData\Local\Temp\icqsetup.exe
C:\Users\Runo\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Runo\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Runo\AppData\Local\Temp\nvStInst.exe
C:\Users\Runo\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 11:48

==================== End Of Log ============================
         

--- --- ---


Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Runo at 2014-04-05 18:33:20
Running from C:\Users\Runo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Behaviors SDK (XAML) for Visual Studio (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Build Tools - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Dassault Systemes Software B19 (HKLM\...\Dassault Systemes B19_0) (Version:  - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
Dualpix Exchange (HKLM-x32\...\{2FDDE008-7BAA-4CAC-9AC3-92C0C1111A3A}) (Version: 4.0.2.1 - Hercules)
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
File Type Advisor 1.4 (HKLM-x32\...\File Type Advisor_is1) (Version:  - filetypeadvisor.com)
Free YouTube Download version 3.2.32.327 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.32.327 - DVDVideoSoft Ltd.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
Hercules Webcam Station Evolution SE (HKLM-x32\...\{C3C44248-B8F7-4B20-A5C7-994870B60F55}) (Version: 4.1.1.2 - Hercules)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (HKLM\...\{C41713B3-DCB0-48C3-B830-47CB59C60B89}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710n-z Hilfe (HKLM-x32\...\{EFBC0CB1-AFFD-4E74-ACEF-42099F1D49C3}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.6.1403.19) (Version: 3.6.1403.19 - Solveig Multimedia)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) Network Connections 18.8.136.0 (Version: 18.8.136.0 - Intel) Hidden
Iomega Encryption (HKLM\...\{3B582B41-5FFC-4AB8-B006-A087BDE74494}) (Version: 1.00.0009 - Iomega an EMC Company)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaScript Tooling (Version: 12.0.21005 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (ENU) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft Advertising SDK for Windows 8.1 - ENU (x32 Version: 8.1.30809.0 - Microsoft Corporation) Hidden
Microsoft Advertising Service Extension for Visual Studio (x32 Version: 12.0.30809.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2013 - ENU (x32 Version: 4.1.21001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20716.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Frameworks and Tools - Visual Studio 2013 - ENU (x32 Version: 5.0.11001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2013 - ENU (x32 Version: 4.1.21001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20716.0 - Microsoft Corporation) Hidden
Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Microsoft Exchange Web Services Managed API 2.0 (x32 Version: 15.0.516.14 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft Identity Extensions (Version: 2.0.1459.0 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 CoreRes - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 v4.0 Tools (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 v4.0 ToolsRes - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch v4.0 SDK (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2013 (x32 Version: 2.7.40911.287 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office 2013 Developer Tools for Microsoft Visual Studio (x64) - ENU Language Pack (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Office 2013 Developer Tools for Microsoft Visual Studio (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 12.0.21005.01 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 12.0.21005.01 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2013 (x32 Version: 11.1.3366.16 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio 2012 Nuget Package (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio ENU Language Pack (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Team Foundation Server 2013 Object Model Language Pack (x64) - ENU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) German (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++  ARM Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Native Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Native Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-arm Cross Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-arm Cross Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-x86 Cross Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-x86 Cross Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x86 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013  x64 Designtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 32bit Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Extended Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Microsoft Foundation Class Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (Version: 8.0.52572 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: 8.0.50727.146 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40825 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Devenv (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Devenv Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Performance Collection Tools - ENU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Performance Collection Tools (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Preparation (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Profiling Tools (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Team Explorer Language Pack - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 VsGraphics Helper Dependencies (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2013 - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{6dff50d0-3bc3-4a92-b724-bf6d6a99de4f}) (Version: 12.0.21005.13 - Microsoft Corporation)
Microsoft Visual Studio Professional 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2013 XAML UI Designer enu Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Developer Tools 2013 - Visual Studio 2013 (x32 Version: 2.0.40926.0 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 (HKLM-x32\...\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}) (Version: 3.0.5305.0 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{5375FD61-C0E9-11E1-9297-F04DA23A5C58}) (Version: 12.0.334 - Sony)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
RemoteComms External Disk Access (HKLM-x32\...\{04FCD5DE-1662-4F99-BDA9-C57212113EF2}) (Version: 1.25.0003 - PLX Technology)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SolidWorks 2013 x64 Edition SP05 (HKLM-x32\...\SolidWorks Installation Manager 20130-40500-1100-100) (Version: 21.5.0.76 - SolidWorks Corporation)
SolidWorks 2013 x64 Edition SP05 (Version: 21.150.76 - SolidWorks) Hidden
SolidWorks 2013 x64 German Resources (Version: 21.150.76 - SolidWorks Corporation) Hidden
SolidWorks eDrawings 2013 x64 Edition SP05 (Version: 13.5.111 - Dassault Systèmes SolidWorks Corp) Hidden
Stronghold Crusader (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version:  - )
Studie zur Verbesserung von HP Officejet 6500 E710n-z Produkten (HKLM\...\{C9347A74-CDAD-4076-B754-11752F6BE324}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{4B93560B-F33D-4A67-A224-F5E1C329BD22}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Visual F# 3.1 SDK (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual F# 3.1 VS (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio 2013 Prerequisites - ENU Language Pack (Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio 2013 Prerequisites (Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9600.16408 - Microsoft Corporation) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows App Certification Kit Native Components (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Azure Mobile Services SDK (x32 Version: 1.0.10815.0 - Microsoft Corporation) Hidden
Windows Azure Mobile Services Tools for Visual Studio 2013 Preview - v1.0 (x32 Version: 1.0.60906.1602 - Microsoft Corporation) Hidden
Windows Azure Shared Components for Microsoft Visual Studio 2013 - v1.0 (x32 Version: 1.0.10829.1601 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch for Visual Studio 2013 - v2.1 (x32 Version: 2.1.10909.1601 - Microsoft) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Runtime Intellisense Content - en-us (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Workflow Manager Client 1.0 (Version: 2.0.30813.2 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.30725.1 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

29-03-2014 19:52:39 Geplanter Prüfpunkt
29-03-2014 21:02:09 Installiert Stronghold Crusader
30-03-2014 21:48:52 Removed Bonjour
30-03-2014 21:49:40 Removed Movie Studio Platinum 13.0 (64-bit)
04-04-2014 17:25:15 DirectX wurde installiert
04-04-2014 19:36:34 Removed Autodesk Network License Manager
04-04-2014 19:37:02 Removed Autodesk Simulation CFD Viewer 2014
04-04-2014 19:39:42 Removed Autodesk Inventor Fusion 2013 R1
04-04-2014 19:45:24 Removed Autodesk Material Library 2013.
04-04-2014 19:46:52 Removed Autodesk Material Library Base Resolution Image Library 2013.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {103A25D2-F85E-4125-84F5-80D9FFFBD276} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-09-04] (File Type Advisor)
Task: {1169E802-1E7C-4049-BD55-3B5EB85676F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.)
Task: {2CFB0757-4870-45DF-A884-7A3571D093B4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {6545D43B-0B3A-4D37-B878-095A50B4F712} - System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => C:\Program Files\V-bates\PrefHelper.exe
Task: {65C88C68-13B0-41D3-9FA0-8881DAAAB83E} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710n-z => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.)
Task: {D339539D-6D84-4DC6-BCE0-15D7AE808C98} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-09-04] (filetypeadvisor.com                                         )
Task: {DFE02654-52E5-41F0-A666-C48F13E7A763} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.)
Task: C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-02-18 20:49 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-24 01:59 - 2009-03-13 16:35 - 00515584 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\highgui110_64.dll
2014-03-24 01:59 - 2009-03-13 16:34 - 01341952 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\cxcore110_64.dll
2014-03-24 01:59 - 2009-03-13 16:35 - 01195520 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\cv110_64.dll
2013-10-01 23:25 - 2013-10-01 23:25 - 00276008 _____ () C:\Program Files\SolidWorks Corp\SolidWorks\sldBodyDiffu.dll
2014-02-18 19:56 - 2014-02-14 12:00 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-04-05 17:50 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-04-05 17:50 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-04-05 17:50 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-04-05 17:50 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: HP Officejet 6500 E710n-z (NET) => "C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe" -deviceID "CN0C9117FH05JW:NW" -scfn "HP Officejet 6500 E710n-z (NET)" -AutoStart 1
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (04/05/2014 06:07:15 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "3" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/05/2014 06:07:15 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "1" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/05/2014 06:07:15 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "2" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/05/2014 06:07:15 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "0" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 43%
Total physical RAM: 3959.09 MB
Available physical RAM: 2240.91 MB
Total Pagefile: 7916.37 MB
Available Pagefile: 5557.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:95.65 GB) NTFS
Drive d: () (Fixed) (Total:465.76 GB) (Free:337.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E49E1146)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Gmer.log

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-05 18:54:27
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 WDC_WD10EZEX-08M2NA0 rev.01.01A01 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Runo\AppData\Local\Temp\kxldrpog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                             fffff800031a8000 52 bytes [FF, FF, FF, FF, FF, FF, FF, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 582                                                                             fffff800031a8036 27 bytes [FF, FF, FF, FF, FF, FF, FF, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000768a1465 2 bytes [8A, 76]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000768a14bb 2 bytes [8A, 76]
.text     ...                                                                                                                                            * 2
.text     C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69              00000000768a1465 2 bytes [8A, 76]
.text     C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155             00000000768a14bb 2 bytes [8A, 76]
.text     ...                                                                                                                                            * 2
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[2412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000768a1465 2 bytes [8A, 76]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[2412] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000768a14bb 2 bytes [8A, 76]
.text     ...                                                                                                                                            * 2

---- EOF - GMER 2.1 ----
         

defogger_disable.log

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:31 on 05/04/2014 (Runo)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Mit freundlichem Gruß

Runo

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:

• Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
• Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
• Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
• Solltest du mir nicht innerhalb von 4 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
  Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
• Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
• Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
  Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
  Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

poste mir mal bitte die Logdateien von MBAM und AdwCleaner, dann sehen wir weiter.

Hier die Logdateien:

MBAM:

Nr. 1 von 3:

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.04.05.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Runo :: RUNO-PC [Administrator]

Schutz: Aktiviert

05.04.2014 11:52:09
mbam-log-2014-04-05 (11-52-09).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 224691
Laufzeit: 4 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> 4216 -> Löschen bei Neustart.

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 13
HKCR\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13} (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Extension.ExtensionHelperObject.1 (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Extension.ExtensionHelperObject (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\V-bates Updater (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\V-bates (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 4
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Daten: C:\Program Files\V-bates\Firefox -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 17
C:\Program Files\V-bates (PUP.Optional.VbatesHelper.A) -> Löschen bei Neustart.
C:\Program Files\V-bates\Firefox (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\libraries (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\resources (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\locale (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\locale\en-US (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\skin (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\defaults (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\defaults\preferences (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\libraries (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\resources (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Roaming\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 31
C:\Program Files\V-bates\Extension32.dll (PUP.Optional.VBates) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\minibarchrome.exe (PUP.Optional.GenericExt.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\IminentUninstall.exe3e74e2 (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\IMsetup.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\Umbrella239.exe3e74f1 (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\uninstall.exe3e74e2 (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Temp\is-LQLL6.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\source.crx (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\DGChrome.exe (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Extension64.dll (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> Löschen bei Neustart.
C:\Program Files\V-bates\InstallerHelper.dll (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\NMHClient.exe (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\NMHClient.json (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\PrefHelper.exe (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\unins000.dat (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\unins000.exe (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome.manifest (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\icon.png (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\install.rdf (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\main.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\main.xul (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\content\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\locale\en-US\overlay.dtd (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\chrome\skin\overlay.css (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\Firefox\defaults\preferences\defaults.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\V-bates\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Roaming\IminentToolbar\sqlite3.dll (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Nr. 2 von 3:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.04.05.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Runo :: RUNO-PC [Administrator]

05.04.2014 12:05:20
mbam-log-2014-04-05 (12-05-20).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 587158
Laufzeit: 1 Stunde(n), 7 Minute(n), 30 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 5
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DOBDGTF0\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DOBDGTF0\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DYHXFZDI\IMinentToolbar[1].exe (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DYHXFZDI\MinibarChrome[1].exe (PUP.Optional.GenericExt.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RO4KMJ35\metro[1].exe (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Nr. 3 von 3:

2014/04/05 03:32:53 +0200	RUNO-PC	(null)	MESSAGE	Starting protection
2014/04/05 03:32:53 +0200	RUNO-PC	(null)	MESSAGE	Protection started successfully
2014/04/05 03:32:53 +0200	RUNO-PC	(null)	MESSAGE	Starting IP protection
2014/04/05 03:32:56 +0200	RUNO-PC	(null)	MESSAGE	IP Protection started successfully
2014/04/05 10:39:52 +0200	RUNO-PC	(null)	MESSAGE	Starting protection
2014/04/05 10:39:52 +0200	RUNO-PC	(null)	MESSAGE	Protection started successfully
2014/04/05 10:39:52 +0200	RUNO-PC	(null)	MESSAGE	Starting IP protection
2014/04/05 10:39:54 +0200	RUNO-PC	(null)	MESSAGE	IP Protection started successfully
2014/04/05 10:44:54 +0200	RUNO-PC	Runo	MESSAGE	Starting database refresh
2014/04/05 10:44:54 +0200	RUNO-PC	Runo	MESSAGE	Stopping IP protection
2014/04/05 10:44:54 +0200	RUNO-PC	Runo	MESSAGE	IP Protection stopped successfully
2014/04/05 10:44:56 +0200	RUNO-PC	Runo	MESSAGE	Database refreshed successfully
2014/04/05 10:44:56 +0200	RUNO-PC	Runo	MESSAGE	Starting IP protection
2014/04/05 10:44:59 +0200	RUNO-PC	Runo	MESSAGE	IP Protection started successfully
2014/04/05 11:36:53 +0200	RUNO-PC	Runo	IP-BLOCK	78.140.143.46 (Type: outgoing, Port: 52910, Process: chrome.exe)
2014/04/05 11:36:53 +0200	RUNO-PC	Runo	IP-BLOCK	78.140.143.46 (Type: outgoing, Port: 52911, Process: chrome.exe)
         

Adw-Cleaner:

Nr. 1 von 3:

# AdwCleaner v3.023 - Bericht erstellt am 05/04/2014 um 16:11:46
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Runo - RUNO-PC
# Gestartet von : C:\Users\Runo\Downloads\adwcleaner (1).exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gefunden C:\Users\Runo\AppData\Local\Temp\OCS

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Iminent
Wert Gefunden : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1567 octets] - [05/04/2014 16:11:46]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1627 octets] ##########
         

Nr. 2 von 3

# AdwCleaner v3.023 - Bericht erstellt am 05/04/2014 um 17:38:57
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Runo - RUNO-PC
# Gestartet von : C:\Users\Runo\Downloads\adwcleaner (1).exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1731 octets] - [05/04/2014 16:11:46]
AdwCleaner[R1].txt - [720 octets] - [05/04/2014 17:38:57]
AdwCleaner[S0].txt - [1748 octets] - [05/04/2014 16:12:38]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [839 octets] ##########
         

Nr. 3 von 3

# AdwCleaner v3.023 - Bericht erstellt am 05/04/2014 um 16:12:38
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Runo - RUNO-PC
# Gestartet von : C:\Users\Runo\Downloads\adwcleaner (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Runo\AppData\Local\Temp\OCS

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Iminent

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1731 octets] - [05/04/2014 16:11:46]
AdwCleaner[S0].txt - [1588 octets] - [05/04/2014 16:12:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1648 octets] ##########
         

Adw-Cleaner Quarantäne:

C:\Users\Runo\AppData\Local\Temp\OCS\ICSharpCode.SharpZipLib.dll->C:\AdwCleaner\Quarantine\C\Users\Runo\AppData\Local\Temp\OCS\ICSharpCode.SharpZipLib.dll.vir
C:\Users\Runo\AppData\Local\Temp\OCS\kamnvmamrflqyhlx.dat->C:\AdwCleaner\Quarantine\C\Users\Runo\AppData\Local\Temp\OCS\kamnvmamrflqyhlx.dat.vir
C:\Users\Runo\AppData\Local\Temp\OCS\ocs_v71a.exe->C:\AdwCleaner\Quarantine\C\Users\Runo\AppData\Local\Temp\OCS\ocs_v71a.exe.vir
C:\Users\Runo\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\f849dd5afe48fff0989e13acb1b1bc26\rcsetup150.exe->C:\AdwCleaner\Quarantine\C\Users\Runo\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\f849dd5afe48fff0989e13acb1b1bc26\rcsetup150.exe.vir
         

Servus,





Schritt 1

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 2
Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/

• Bitte deaktiviere während des Scans alle Virenscanner, da sie das Ergebnis beeinflussen können.
• Starte die zoek.exe mit einem Doppelklick.
• Achtung: Das folgende Skript wurde nur für diesen speziellen Fall geschrieben und sollte nicht 1:1 auf andere Computer übernommen werden.
• Kopiere den Text der folgenden Box in das Skriptfenster von zoek:
  

  FFdefaults;
  CHRdefaults;
  iedefaults;
  emptyclsid;
  autoclean;
           

• Nun klicke auf "Run script" und sei geduldig bis das Skript durchgelaufen ist.
• Wenn das Tool fertig ist, wird sich eine Logdatei öffnen (ggf. erst nach einem Neustart). Das Log befindet sich aber auch noch unter c:
• Bitte poste mir das ZOEK-Log (möglichst in CODE-Tags - #-Symbol im Antwortfenster klicken)

Bitte poste mit deiner nächsten Antwort

• die Logdatei von JRT,
• die Logdatei von Zoek.

Erst einmal Danke für die bisherige Hilfestellung.

Zu Schritt zwei:

Wenn ich mir die zoek.exe durch den angegebenen Link herunterladen möchte, wird durch Avira ein Fund gemeldet, der lautet: Der Zugriff auf die Datei C:\...\zoek.exe ... TR/Agent.1285120.19 wurde blockiert."

Kann ich diese Warnung ignorieren?

Gruß
Runo

Zitat von Runo

Wenn ich mir die zoek.exe durch den angegebenen Link herunterladen möchte, wird durch Avira ein Fund gemeldet, der lautet: Der Zugriff auf die Datei C:\...\zoek.exe ... TR/Agent.1285120.19 wurde blockiert."

Kann ich diese Warnung ignorieren?

Ja, bitte Avira deaktivieren (während Zoek geladen und ausgeführt wird), das ist ein Fehlalarm!

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Runo on 07.04.2014 at 19:34:37,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.04.2014 at 19:38:51,01
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Zoek

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Runo on 07.04.2014 at 19:54:39,37.
Microsoft Windows 7 Professional  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Runo\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

07.04.2014 19:56:27 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_CLASSES_ROOT\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully
HKEY_USERS\S-1-5-21-3394165559-2773926514-3256092546-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} deleted successfully
HKEY_USERS\S-1-5-21-3394165559-2773926514-3256092546-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{1FAFD711-ABF9-4F6A-8130-5166C7371427} deleted successfully
HKEY_USERS\S-1-5-21-3394165559-2773926514-3256092546-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{112BA211-334C-4A90-90EC-2AD1CDAB287C} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
"C:\PROGRA~3\Package Cache" deleted

==== Chrome Look ======================

AdBlock - Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Stealthy - Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje
Proxy List - Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\omihnninlhneakfglooiofgdbpmnhjgn

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Officejet 6500 E710n-z (NET) deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Runo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=509 folders=529 1496395735 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Runo\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Runo\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 07.04.2014 at 20:06:20,62 ======================
         

Servus,



Wir spüren die letzten Reste auf, damit wir sie später entfernen können:




Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu einen Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden zwei Logdateien erzeugt. Poste mir diese.






Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort

• die zwei Logdateien von FRST,
• die Beantwortung der gestellten Fragen.

FRST


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by Runo (administrator) on RUNO-PC on 09-04-2014 18:25:24
Running from C:\Users\Runo\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Guillemot Corporation S.A.) C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks\sldworks_fs.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [CamserviceExchange] - C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe [3382568 2011-09-07] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] - [X]
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-02-18] (Microsoft Corporation)
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [] - [X]
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6563608 2014-01-06] (SUPERAntiSpyware)
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\MountPoints2: {0270595a-98d5-11e3-8f5b-90fba6483d79} - Iomega Encryption Utility.exe
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60B1E2EBAB2CCF01
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-05]
CHR Extension: (Google Drive) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-05]
CHR Extension: (YouTube) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-05]
CHR Extension: (Google-Suche) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-05]
CHR Extension: (AdBlock) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-08]
CHR Extension: (Google Wallet) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-05]
CHR Extension: (Google Mail) - C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-05]

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-11] (SUPERAntiSpyware.com)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-19] (Disc Soft Ltd)
S3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation)
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 OXSDIDRV_x64; C:\Windows\System32\DRIVERS\OXSDIDRV_x64.sys [51760 2009-09-28] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
S3 cpuz134; \??\C:\Users\Runo\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 18:25 - 2014-04-09 18:25 - 00010736 _____ () C:\Users\Runo\Downloads\FRST.txt
2014-04-09 07:37 - 2014-04-09 18:03 - 00000392 _____ () C:\Windows\setupact.log
2014-04-09 07:37 - 2014-04-09 07:37 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-08 21:04 - 2014-04-08 21:04 - 00021955 _____ () C:\Users\Runo\AppData\Local\recently-used.xbel
2014-04-07 20:04 - 2014-04-07 19:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-07 19:56 - 2014-04-07 20:06 - 00006117 _____ () C:\zoek-results.log
2014-04-07 19:54 - 2014-04-07 20:02 - 00000000 ____D () C:\zoek_backup
2014-04-07 19:53 - 2014-04-07 19:53 - 01285120 _____ () C:\Users\Runo\Downloads\zoek.exe
2014-04-07 19:38 - 2014-04-07 19:38 - 00000624 _____ () C:\Users\Runo\Desktop\JRT.txt
2014-04-06 22:09 - 2014-04-06 22:09 - 00000000 ____D () C:\Users\Runo\Downloads\P5_Delftship
2014-04-06 22:08 - 2014-04-06 22:08 - 00195412 _____ () C:\Users\Runo\Downloads\P5_Delftship.zip
2014-04-06 15:32 - 2014-04-06 15:32 - 01016261 _____ (Thisisu) C:\Users\Runo\Desktop\JRT.exe
2014-04-06 12:25 - 2014-04-06 12:25 - 00388608 _____ (Trend Micro Inc.) C:\Users\Runo\Downloads\hijackthis_5833.exe
2014-04-06 11:43 - 2014-04-06 12:42 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\FileAdvisor
2014-04-05 18:54 - 2014-04-05 18:54 - 00002439 _____ () C:\Users\Runo\Desktop\gmer.log
2014-04-05 18:33 - 2014-04-05 18:33 - 00046021 _____ () C:\Users\Runo\Desktop\Addition.txt
2014-04-05 18:32 - 2014-04-09 18:25 - 00000000 ____D () C:\FRST
2014-04-05 18:32 - 2014-04-05 18:33 - 00042578 _____ () C:\Users\Runo\Desktop\FRST.txt
2014-04-05 18:31 - 2014-04-05 18:31 - 00000470 _____ () C:\Users\Runo\Desktop\defogger_disable.log
2014-04-05 18:31 - 2014-04-05 18:31 - 00000000 _____ () C:\Users\Runo\defogger_reenable
2014-04-05 18:17 - 2014-04-05 18:17 - 02157056 _____ (Farbar) C:\Users\Runo\Downloads\FRST64.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00380416 _____ () C:\Users\Runo\Downloads\Gmer-19357.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00050477 _____ () C:\Users\Runo\Downloads\Defogger.exe
2014-04-05 18:00 - 2014-04-05 18:00 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 17:50 - 2014-04-05 17:50 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-05 16:11 - 2014-04-05 17:39 - 00000000 ____D () C:\AdwCleaner
2014-04-05 16:11 - 2014-04-05 16:11 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner (1).exe
2014-04-05 11:44 - 2014-04-09 18:14 - 00000280 _____ () C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job
2014-04-05 11:44 - 2014-04-05 11:44 - 00003248 _____ () C:\Windows\System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}
2014-04-05 11:44 - 2014-04-05 11:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-05 11:43 - 2014-04-06 11:43 - 00000000 ____D () C:\Program Files (x86)\File Type Advisor
2014-04-05 11:43 - 2014-04-05 11:43 - 00003514 _____ () C:\Windows\System32\Tasks\FileAdvisorCheck
2014-04-05 11:43 - 2014-04-05 11:43 - 00003512 _____ () C:\Windows\System32\Tasks\FileAdvisorUpdate
2014-04-04 21:27 - 2014-04-04 21:27 - 00000000 ____D () C:\install
2014-04-04 20:46 - 2014-04-04 20:46 - 00000000 ____D () C:\Users\Runo\Documents\Vault Workspace
2014-04-04 19:31 - 2014-04-04 19:31 - 00001945 _____ () C:\Users\Runo\Desktop\prototyp - Verknüpfung.lnk
2014-04-04 19:28 - 2014-04-04 21:37 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft WSE 3.0
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-04 19:26 - 2014-04-04 21:52 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-04-04 19:26 - 2014-04-04 21:52 - 00000000 ____D () C:\Program Files\Autodesk
2014-04-04 19:25 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-04-04 19:25 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-04-04 19:25 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-04-04 19:23 - 2014-04-04 20:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Autodesk
2014-04-03 22:09 - 2014-04-08 01:17 - 00000000 _____ () C:\Users\Runo\AppData\Local\Temptable.xml
2014-04-02 21:14 - 2014-04-02 21:14 - 00000287 _____ () C:\Users\Runo\Downloads\dirk_ringhand.vcf
2014-04-02 21:04 - 2014-04-02 21:04 - 00000000 ____D () C:\ProgramData\MentorGraphics
2014-03-30 23:59 - 2014-04-06 09:20 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Winamp
2014-03-30 23:59 - 2014-03-30 23:59 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-03-30 23:51 - 2014-03-31 21:54 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 12.0 Projekte
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files\Sony
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-03-30 23:24 - 2014-03-30 23:24 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Publish Providers
2014-03-30 23:23 - 2014-03-30 23:23 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 13.0 Projects
2014-03-30 23:21 - 2014-03-31 20:22 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Sony
2014-03-30 23:21 - 2014-03-30 23:50 - 00000000 ____D () C:\Users\Runo\AppData\Local\Sony
2014-03-30 23:21 - 2014-03-30 23:21 - 00000000 ____D () C:\ProgramData\Sony
2014-03-28 23:39 - 2014-04-04 19:32 - 00000199 _____ () C:\Users\Runo\Desktop\Neues Textdokument.txt
2014-03-26 22:05 - 2014-03-26 22:05 - 05962953 _____ () C:\Users\Runo\Downloads\01+The+Conversation.m4a.mp4
2014-03-24 21:41 - 2014-04-05 18:39 - 00000000 ____D () C:\Program Files (x86)\Dassault Systemes
2014-03-24 01:59 - 2014-03-24 01:59 - 00000000 ____D () C:\Windows\HerculesWebcamUpdater
2014-03-24 01:59 - 2011-06-27 11:31 - 00589824 _____ (Guillemot Corporation S.A.) C:\Windows\SysWOW64\HWLMSET2.exe
2014-03-24 01:59 - 2011-06-27 11:31 - 00009728 _____ () C:\Windows\SysWOW64\HWLMSET2PS.dll
2014-03-24 01:59 - 2009-04-22 16:46 - 03552384 _____ () C:\Windows\system32\Drivers\snp2uvc.sys
2014-03-24 01:59 - 2009-02-09 01:43 - 00111104 _____ (Guillemot Corporation) C:\Windows\system32\Drivers\hxctlflt.sys
2014-03-24 01:59 - 2008-08-21 17:15 - 00179712 _____ ( ) C:\Windows\system32\rsnp2uvc.dll
2014-03-24 01:59 - 2008-08-20 19:05 - 00361472 _____ (Sonix) C:\Windows\system32\vsnp2uvc.dll
2014-03-24 01:59 - 2008-08-20 19:04 - 00291328 _____ (Sonix) C:\Windows\SysWOW64\vsnp2uvc.dll
2014-03-24 01:59 - 2008-07-16 11:59 - 00035840 _____ () C:\Windows\system32\Drivers\sncduvc.sys
2014-03-24 01:59 - 2007-07-04 18:28 - 00301056 _____ ( ) C:\Windows\system32\csnp2uvc.dll
2014-03-24 01:59 - 2006-05-19 12:53 - 00013022 _____ () C:\Windows\snp2uvc.src
2014-03-24 01:59 - 2006-05-19 12:39 - 00015497 _____ () C:\Windows\snp2uvc.ini
2014-03-24 01:47 - 2014-04-08 18:44 - 00008704 _____ () C:\Users\Runo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-24 01:47 - 2014-03-24 01:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Solveig Multimedia
2014-03-24 01:45 - 2014-04-08 18:34 - 00000000 ____D () C:\Users\Runo\Documents\HyperCam3
2014-03-24 01:45 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\HyperCam
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\EDrawings
2014-03-23 19:38 - 2014-03-23 19:38 - 00468168 _____ () C:\Users\Runo\Downloads\seq_2_gd_divx.avi
2014-03-22 15:20 - 2014-03-22 15:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-22 15:20 - 2014-03-22 15:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-22 15:20 - 2014-03-22 15:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-22 11:34 - 2014-03-22 11:34 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-22 11:34 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-22 03:34 - 2014-03-22 03:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SUPERAntiSpyware.com
2014-03-22 03:33 - 2014-03-22 03:34 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-22 03:33 - 2014-03-22 03:33 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-03-22 03:33 - 2014-03-22 03:33 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-22 02:42 - 2014-04-05 17:48 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-03-22 02:42 - 2014-03-22 02:42 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-03-21 20:11 - 2014-03-21 20:11 - 00001528 _____ () C:\Users\Runo\Desktop\Lernfabrik.lnk
2014-03-18 22:54 - 2014-03-18 22:54 - 00000000 ____D () C:\Users\Runo\Documents\Nokia Suite
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2014-03-18 22:46 - 2014-03-18 22:53 - 00000000 ____D () C:\Users\Runo\AppData\Local\NokiaAccount
2014-03-18 22:41 - 2014-03-18 22:53 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\PC Suite
2014-03-18 22:41 - 2014-03-18 22:46 - 00000000 ____D () C:\Users\Runo\AppData\Local\Nokia
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\PC Suite
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\Nokia
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files\DIFX
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2014-03-18 22:40 - 2013-01-23 11:31 - 00057856 _____ (Nokia) C:\Windows\system32\nmwcdclsX64.dll
2014-03-18 22:40 - 2012-10-17 15:53 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys
2014-03-18 22:36 - 2014-03-18 22:41 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-03-18 22:36 - 2014-03-18 22:36 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2014-03-14 02:12 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 02:12 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 02:12 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 02:12 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 02:12 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 02:12 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 02:12 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 02:12 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 02:12 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 02:12 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 02:12 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 02:12 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 02:12 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-14 02:12 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 02:12 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 02:12 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-14 02:12 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 02:12 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 02:12 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-14 02:12 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-14 02:12 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-14 02:12 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-14 02:12 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-14 02:12 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 02:12 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 02:12 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-14 02:12 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-14 02:12 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 02:12 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 02:12 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-14 02:12 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-14 02:12 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 02:12 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-14 02:12 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-14 02:12 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-14 02:12 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 02:12 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-14 02:12 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-14 02:12 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 02:12 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-14 01:38 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 01:38 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 01:38 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-14 01:37 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 01:35 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 01:35 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-14 01:30 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-14 01:30 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 18:05 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-11 18:05 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

==================== One Month Modified Files and Folders =======

2014-04-09 18:25 - 2014-04-09 18:25 - 00010736 _____ () C:\Users\Runo\Downloads\FRST.txt
2014-04-09 18:25 - 2014-04-05 18:32 - 00000000 ____D () C:\FRST
2014-04-09 18:23 - 2014-02-18 14:53 - 00500098 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 18:14 - 2014-04-05 11:44 - 00000280 _____ () C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job
2014-04-09 18:12 - 2014-02-19 11:47 - 00000000 ____D () C:\Users\Runo\Documents\Outlook-Dateien
2014-04-09 18:11 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 18:11 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 18:08 - 2009-07-14 19:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-04-09 18:08 - 2009-07-14 19:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-04-09 18:08 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-09 18:04 - 2014-02-18 19:43 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-09 18:03 - 2014-04-09 07:37 - 00000392 _____ () C:\Windows\setupact.log
2014-04-09 18:03 - 2014-02-18 20:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-09 18:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 08:03 - 2014-02-18 19:43 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-09 07:37 - 2014-04-09 07:37 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-09 01:33 - 2014-02-21 20:27 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Skype
2014-04-09 01:33 - 2014-02-20 01:51 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\vlc
2014-04-08 21:04 - 2014-04-08 21:04 - 00021955 _____ () C:\Users\Runo\AppData\Local\recently-used.xbel
2014-04-08 21:04 - 2014-02-23 13:01 - 00000000 ____D () C:\Users\Runo\.gimp-2.8
2014-04-08 21:03 - 2014-02-23 13:45 - 00000000 ____D () C:\Users\Runo\AppData\Local\gtk-2.0
2014-04-08 18:44 - 2014-03-24 01:47 - 00008704 _____ () C:\Users\Runo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-08 18:34 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\Documents\HyperCam3
2014-04-08 01:19 - 2014-02-22 13:29 - 00000000 ____D () C:\Users\Runo\AppData\Local\TempSWSicherungsverzeichnis
2014-04-08 01:19 - 2014-02-19 14:52 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SolidWorks
2014-04-08 01:17 - 2014-04-03 22:09 - 00000000 _____ () C:\Users\Runo\AppData\Local\Temptable.xml
2014-04-07 20:06 - 2014-04-07 19:56 - 00006117 _____ () C:\zoek-results.log
2014-04-07 20:02 - 2014-04-07 19:54 - 00000000 ____D () C:\zoek_backup
2014-04-07 19:54 - 2014-04-07 20:04 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-07 19:53 - 2014-04-07 19:53 - 01285120 _____ () C:\Users\Runo\Downloads\zoek.exe
2014-04-07 19:38 - 2014-04-07 19:38 - 00000624 _____ () C:\Users\Runo\Desktop\JRT.txt
2014-04-06 22:09 - 2014-04-06 22:09 - 00000000 ____D () C:\Users\Runo\Downloads\P5_Delftship
2014-04-06 22:08 - 2014-04-06 22:08 - 00195412 _____ () C:\Users\Runo\Downloads\P5_Delftship.zip
2014-04-06 15:32 - 2014-04-06 15:32 - 01016261 _____ (Thisisu) C:\Users\Runo\Desktop\JRT.exe
2014-04-06 12:42 - 2014-04-06 11:43 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\FileAdvisor
2014-04-06 12:25 - 2014-04-06 12:25 - 00388608 _____ (Trend Micro Inc.) C:\Users\Runo\Downloads\hijackthis_5833.exe
2014-04-06 11:43 - 2014-04-05 11:43 - 00000000 ____D () C:\Program Files (x86)\File Type Advisor
2014-04-06 09:20 - 2014-03-30 23:59 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Winamp
2014-04-05 18:54 - 2014-04-05 18:54 - 00002439 _____ () C:\Users\Runo\Desktop\gmer.log
2014-04-05 18:39 - 2014-03-24 21:41 - 00000000 ____D () C:\Program Files (x86)\Dassault Systemes
2014-04-05 18:37 - 2014-02-19 16:12 - 00000000 ____D () C:\ProgramData\DassaultSystemes
2014-04-05 18:33 - 2014-04-05 18:33 - 00046021 _____ () C:\Users\Runo\Desktop\Addition.txt
2014-04-05 18:33 - 2014-04-05 18:32 - 00042578 _____ () C:\Users\Runo\Desktop\FRST.txt
2014-04-05 18:31 - 2014-04-05 18:31 - 00000470 _____ () C:\Users\Runo\Desktop\defogger_disable.log
2014-04-05 18:31 - 2014-04-05 18:31 - 00000000 _____ () C:\Users\Runo\defogger_reenable
2014-04-05 18:31 - 2014-02-18 14:54 - 00000000 ____D () C:\Users\Runo
2014-04-05 18:17 - 2014-04-05 18:17 - 02157056 _____ (Farbar) C:\Users\Runo\Downloads\FRST64.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00380416 _____ () C:\Users\Runo\Downloads\Gmer-19357.exe
2014-04-05 18:17 - 2014-04-05 18:17 - 00050477 _____ () C:\Users\Runo\Downloads\Defogger.exe
2014-04-05 18:00 - 2014-04-05 18:00 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 17:50 - 2014-04-05 17:50 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-05 17:50 - 2014-02-18 19:43 - 00000000 ____D () C:\Users\Runo\AppData\Local\Google
2014-04-05 17:50 - 2014-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-05 17:48 - 2014-03-22 02:42 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-04-05 17:39 - 2014-04-05 16:11 - 00000000 ____D () C:\AdwCleaner
2014-04-05 16:11 - 2014-04-05 16:11 - 01426178 _____ () C:\Users\Runo\Downloads\adwcleaner (1).exe
2014-04-05 11:52 - 2014-02-18 22:25 - 00000000 ____D () C:\Users\Runo\Desktop\shortcuts
2014-04-05 11:44 - 2014-04-05 11:44 - 00003248 _____ () C:\Windows\System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}
2014-04-05 11:44 - 2014-04-05 11:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-05 11:43 - 2014-04-05 11:43 - 00003514 _____ () C:\Windows\System32\Tasks\FileAdvisorCheck
2014-04-05 11:43 - 2014-04-05 11:43 - 00003512 _____ () C:\Windows\System32\Tasks\FileAdvisorUpdate
2014-04-05 11:38 - 2014-02-27 21:12 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DVDVideoSoft
2014-04-05 11:38 - 2014-02-27 21:12 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-04-04 21:52 - 2014-04-04 19:26 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-04-04 21:52 - 2014-04-04 19:26 - 00000000 ____D () C:\Program Files\Autodesk
2014-04-04 21:37 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-04-04 21:36 - 2014-02-20 01:48 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-04-04 21:27 - 2014-04-04 21:27 - 00000000 ____D () C:\install
2014-04-04 21:19 - 2014-02-19 11:12 - 00000000 ____D () C:\Users\Runo\Sonstige
2014-04-04 20:47 - 2014-04-04 19:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Autodesk
2014-04-04 20:46 - 2014-04-04 20:46 - 00000000 ____D () C:\Users\Runo\Documents\Vault Workspace
2014-04-04 19:32 - 2014-03-28 23:39 - 00000199 _____ () C:\Users\Runo\Desktop\Neues Textdokument.txt
2014-04-04 19:31 - 2014-04-04 19:31 - 00001945 _____ () C:\Users\Runo\Desktop\prototyp - Verknüpfung.lnk
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft WSE 3.0
2014-04-04 19:28 - 2014-04-04 19:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE
2014-04-04 19:28 - 2014-02-19 09:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-02 21:14 - 2014-04-02 21:14 - 00000287 _____ () C:\Users\Runo\Downloads\dirk_ringhand.vcf
2014-04-02 21:04 - 2014-04-02 21:04 - 00000000 ____D () C:\ProgramData\MentorGraphics
2014-03-31 21:54 - 2014-03-30 23:51 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 12.0 Projekte
2014-03-31 20:22 - 2014-03-30 23:21 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Sony
2014-03-30 23:59 - 2014-03-30 23:59 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-03-30 23:51 - 2014-02-22 13:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\NVIDIA
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files\Sony
2014-03-30 23:50 - 2014-03-30 23:50 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-03-30 23:50 - 2014-03-30 23:21 - 00000000 ____D () C:\Users\Runo\AppData\Local\Sony
2014-03-30 23:24 - 2014-03-30 23:24 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Publish Providers
2014-03-30 23:23 - 2014-03-30 23:23 - 00000000 ____D () C:\Users\Runo\Documents\Movie Studio Platinum 13.0 Projects
2014-03-30 23:21 - 2014-03-30 23:21 - 00000000 ____D () C:\ProgramData\Sony
2014-03-29 23:02 - 2014-02-21 20:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-28 21:50 - 2014-02-18 22:46 - 00000000 ____D () C:\Users\Runo\Textdokumente
2014-03-28 00:58 - 2014-02-18 19:43 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-28 00:58 - 2014-02-18 19:43 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-26 22:05 - 2014-03-26 22:05 - 05962953 _____ () C:\Users\Runo\Downloads\01+The+Conversation.m4a.mp4
2014-03-25 09:04 - 2014-02-18 19:58 - 00127608 _____ () C:\Users\Runo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-25 08:56 - 2009-07-14 06:45 - 00454456 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-25 02:18 - 2014-02-19 16:12 - 00000000 ____D () C:\Users\Runo\AppData\Local\DassaultSystemes
2014-03-24 21:48 - 2009-07-14 04:34 - 00017708 _____ () C:\Windows\system32\Drivers\etc\services
2014-03-24 21:40 - 2014-02-19 16:12 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DassaultSystemes
2014-03-24 01:59 - 2014-03-24 01:59 - 00000000 ____D () C:\Windows\HerculesWebcamUpdater
2014-03-24 01:59 - 2014-02-21 20:53 - 00000000 ____D () C:\Program Files (x86)\Hercules
2014-03-24 01:47 - 2014-03-24 01:47 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Solveig Multimedia
2014-03-24 01:45 - 2014-03-24 01:45 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\HyperCam
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\EDrawings
2014-03-23 19:38 - 2014-03-23 19:38 - 00468168 _____ () C:\Users\Runo\Downloads\seq_2_gd_divx.avi
2014-03-22 15:23 - 2014-02-19 02:17 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\DAEMON Tools Lite
2014-03-22 15:23 - 2014-02-18 14:45 - 00000000 ____D () C:\Windows\Panther
2014-03-22 15:20 - 2014-03-22 15:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-22 15:20 - 2014-03-22 15:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-22 15:20 - 2014-03-22 15:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-22 13:20 - 2014-02-18 20:49 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-22 11:34 - 2014-03-22 11:34 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-22 11:34 - 2014-03-22 11:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-22 03:34 - 2014-03-22 03:34 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\SUPERAntiSpyware.com
2014-03-22 03:34 - 2014-03-22 03:33 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-22 03:33 - 2014-03-22 03:33 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-03-22 03:33 - 2014-03-22 03:33 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-22 02:43 - 2014-02-18 14:54 - 00000000 ____D () C:\Users\Runo\AppData\Local\VirtualStore
2014-03-22 02:42 - 2014-03-22 02:42 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-03-22 02:35 - 2014-02-19 23:13 - 00000000 ____D () C:\Users\Runo\JLoads
2014-03-21 20:11 - 2014-03-21 20:11 - 00001528 _____ () C:\Users\Runo\Desktop\Lernfabrik.lnk
2014-03-21 15:46 - 2014-02-19 21:04 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-03-19 01:43 - 2014-02-18 19:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 01:40 - 2014-02-18 19:32 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-18 22:54 - 2014-03-18 22:54 - 00000000 ____D () C:\Users\Runo\Documents\Nokia Suite
2014-03-18 22:53 - 2014-03-18 22:46 - 00000000 ____D () C:\Users\Runo\AppData\Local\NokiaAccount
2014-03-18 22:53 - 2014-03-18 22:41 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\PC Suite
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-18 22:47 - 2014-03-18 22:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2014-03-18 22:46 - 2014-03-18 22:41 - 00000000 ____D () C:\Users\Runo\AppData\Local\Nokia
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\PC Suite
2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\ProgramData\Nokia
2014-03-18 22:41 - 2014-03-18 22:36 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files\DIFX
2014-03-18 22:40 - 2014-03-18 22:40 - 00000000 ____D () C:\Program Files (x86)\PC Connectivity Solution
2014-03-18 22:36 - 2014-03-18 22:36 - 00000000 ____D () C:\ProgramData\NokiaInstallerCache
2014-03-17 22:22 - 2014-02-19 22:27 - 00000000 ___RD () C:\Users\Runo\Dropbox
2014-03-17 22:20 - 2014-02-19 22:23 - 00000000 ____D () C:\Users\Runo\AppData\Roaming\Dropbox
2014-03-14 10:17 - 2014-02-19 12:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 10:17 - 2014-02-19 12:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\Runo\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 11:48

==================== End Of Log ============================
         

--- --- ---


Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Runo at 2014-04-09 18:26:08
Running from C:\Users\Runo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Behaviors SDK (XAML) for Visual Studio (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Build Tools - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
Dualpix Exchange (HKLM-x32\...\{2FDDE008-7BAA-4CAC-9AC3-92C0C1111A3A}) (Version: 4.0.2.1 - Hercules)
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
File Type Advisor 1.4 (HKLM-x32\...\File Type Advisor_is1) (Version:  - filetypeadvisor.com)
Free YouTube Download version 3.2.32.327 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.32.327 - DVDVideoSoft Ltd.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
Hercules Webcam Station Evolution SE (HKLM-x32\...\{C3C44248-B8F7-4B20-A5C7-994870B60F55}) (Version: 4.1.1.2 - Hercules)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (HKLM\...\{C41713B3-DCB0-48C3-B830-47CB59C60B89}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710n-z Hilfe (HKLM-x32\...\{EFBC0CB1-AFFD-4E74-ACEF-42099F1D49C3}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.6.1403.19) (Version: 3.6.1403.19 - Solveig Multimedia)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) Network Connections 18.8.136.0 (Version: 18.8.136.0 - Intel) Hidden
Iomega Encryption (HKLM\...\{3B582B41-5FFC-4AB8-B006-A087BDE74494}) (Version: 1.00.0009 - Iomega an EMC Company)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaScript Tooling (Version: 12.0.21005 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (ENU) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft Advertising SDK for Windows 8.1 - ENU (x32 Version: 8.1.30809.0 - Microsoft Corporation) Hidden
Microsoft Advertising Service Extension for Visual Studio (x32 Version: 12.0.30809.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2013 - ENU (x32 Version: 4.1.21001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20716.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Frameworks and Tools - Visual Studio 2013 - ENU (x32 Version: 5.0.11001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2013 - ENU (x32 Version: 4.1.21001.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20716.0 - Microsoft Corporation) Hidden
Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Microsoft Exchange Web Services Managed API 2.0 (x32 Version: 15.0.516.14 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden
Microsoft Identity Extensions (Version: 2.0.1459.0 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 CoreRes - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 v4.0 Tools (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2013 v4.0 ToolsRes - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft LightSwitch v4.0 SDK (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2013 (x32 Version: 2.7.40911.287 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office 2013 Developer Tools for Microsoft Visual Studio (x64) - ENU Language Pack (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Office 2013 Developer Tools for Microsoft Visual Studio (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 12.0.21005.01 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 12.0.21005.01 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2013 (x32 Version: 11.1.3366.16 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio 2012 Nuget Package (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft SharePoint 2013 Developer Tools for Visual Studio ENU Language Pack (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Team Foundation Server 2013 Object Model Language Pack (x64) - ENU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) German (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++  ARM Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Native Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64 Native Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-arm Cross Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-arm Cross Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-x86 Cross Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x64-x86 Cross Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++  x86 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013  x64 Designtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 32bit Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers - ENU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Extended Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Microsoft Foundation Class Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (Version: 8.0.52572 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: 8.0.50727.146 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40825 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Devenv (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Devenv Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Performance Collection Tools - ENU (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Performance Collection Tools (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Preparation (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Profiling Tools (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Shell (Minimum) Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 Team Explorer Language Pack - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2013 VsGraphics Helper Dependencies (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2013 - ENU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{6dff50d0-3bc3-4a92-b724-bf6d6a99de4f}) (Version: 12.0.21005.13 - Microsoft Corporation)
Microsoft Visual Studio Professional 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2013 XAML UI Designer enu Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Developer Tools 2013 - Visual Studio 2013 (x32 Version: 2.0.40926.0 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 (HKLM-x32\...\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}) (Version: 3.0.5305.0 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{5375FD61-C0E9-11E1-9297-F04DA23A5C58}) (Version: 12.0.334 - Sony)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
RemoteComms External Disk Access (HKLM-x32\...\{04FCD5DE-1662-4F99-BDA9-C57212113EF2}) (Version: 1.25.0003 - PLX Technology)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SolidWorks 2013 x64 Edition SP05 (HKLM-x32\...\SolidWorks Installation Manager 20130-40500-1100-100) (Version: 21.5.0.76 - SolidWorks Corporation)
SolidWorks 2013 x64 Edition SP05 (Version: 21.150.76 - SolidWorks) Hidden
SolidWorks 2013 x64 German Resources (Version: 21.150.76 - SolidWorks Corporation) Hidden
SolidWorks eDrawings 2013 x64 Edition SP05 (Version: 13.5.111 - Dassault Systèmes SolidWorks Corp) Hidden
Stronghold Crusader (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version:  - )
Studie zur Verbesserung von HP Officejet 6500 E710n-z Produkten (HKLM\...\{C9347A74-CDAD-4076-B754-11752F6BE324}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{4B93560B-F33D-4A67-A224-F5E1C329BD22}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Visual F# 3.1 SDK (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual F# 3.1 VS (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio 2013 Prerequisites - ENU Language Pack (Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio 2013 Prerequisites (Version: 12.0.21005 - Microsoft Corporation) Hidden
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9600.16408 - Microsoft Corporation) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows App Certification Kit Native Components (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Azure Mobile Services SDK (x32 Version: 1.0.10815.0 - Microsoft Corporation) Hidden
Windows Azure Mobile Services Tools for Visual Studio 2013 Preview - v1.0 (x32 Version: 1.0.60906.1602 - Microsoft Corporation) Hidden
Windows Azure Shared Components for Microsoft Visual Studio 2013 - v1.0 (x32 Version: 1.0.10829.1601 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch for Visual Studio 2013 - v2.1 (x32 Version: 2.1.10909.1601 - Microsoft) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Runtime Intellisense Content - en-us (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Workflow Manager Client 1.0 (Version: 2.0.30813.2 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.30725.1 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

07-04-2014 17:56:14 zoek.exe restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {103A25D2-F85E-4125-84F5-80D9FFFBD276} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-09-04] (File Type Advisor)
Task: {1169E802-1E7C-4049-BD55-3B5EB85676F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.)
Task: {2CFB0757-4870-45DF-A884-7A3571D093B4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {6545D43B-0B3A-4D37-B878-095A50B4F712} - System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => C:\Program Files\V-bates\PrefHelper.exe
Task: {65C88C68-13B0-41D3-9FA0-8881DAAAB83E} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710n-z => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.)
Task: {D339539D-6D84-4DC6-BCE0-15D7AE808C98} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-09-04] (filetypeadvisor.com                                         )
Task: {DFE02654-52E5-41F0-A666-C48F13E7A763} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-18] (Google Inc.)
Task: C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-02-18 20:49 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-24 01:59 - 2009-03-13 16:35 - 00515584 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\highgui110_64.dll
2014-03-24 01:59 - 2009-03-13 16:34 - 01341952 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\cxcore110_64.dll
2014-03-24 01:59 - 2009-03-13 16:35 - 01195520 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\cv110_64.dll
2014-03-24 01:59 - 2011-09-07 11:55 - 00037672 _____ () C:\Program Files (x86)\Hercules\Dualpix Exchange\WebCamKSProxyPlugin.ax
2013-10-01 23:25 - 2013-10-01 23:25 - 00276008 _____ () C:\Program Files\SolidWorks Corp\SolidWorks\sldBodyDiffu.dll
2014-02-18 19:56 - 2014-02-14 12:00 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))

Error: (04/09/2014 07:38:14 AM) (Source: ESENT) (User: )
Description: Windows (3796) Windows: Fehler -1811 beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00136.log.


System errors:
=============
Error: (04/09/2014 06:03:43 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "3" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/09/2014 06:03:43 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "1" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/09/2014 06:03:43 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "2" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/09/2014 06:03:43 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "0" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.

Error: (04/09/2014 07:38:23 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/09/2014 07:38:23 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (04/09/2014 07:38:23 AM) (Source: DCOM) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (04/09/2014 07:38:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/09/2014 07:38:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (04/09/2014 07:37:11 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für Leistung des Prozessors "3" in der Gruppe "0" sind aufgrund eines Firmwareproblems deaktiviert. Erkundigen Sie sich beim Hersteller des Computers nach aktualisierter Firmware.


Microsoft Office Sessions:
=========================
Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/09/2014 07:38:16 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (04/09/2014 07:38:15 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))

Error: (04/09/2014 07:38:14 AM) (Source: ESENT)(User: )
Description: Windows3796Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00136.log-1811


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 3959.09 MB
Available physical RAM: 2693.22 MB
Total Pagefile: 7916.37 MB
Available Pagefile: 5973.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:97.5 GB) NTFS
Drive d: () (Fixed) (Total:465.76 GB) (Free:337.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E49E1146)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Zu den Fragen:
Mein Rechner läut derzeit wieder gut und ohne Probleme. Von Malware komischerweise auch keine Anzeichen mehr.

Servus,



Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
Im Anschluss daran räumen wir auf und ich gebe dir noch ein paar Tipps mit auf den Weg.



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

start
HKLM-x32\...\Run: [] - [X]
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [] - [X]
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Task: {6545D43B-0B3A-4D37-B878-095A50B4F712} - System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job => C:\Program Files\V-bates\PrefHelper.exe
C:\Program Files\V-bates
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

• Starte die HitmanPro.exe
• Klicke auf
  
• Entferne den Haken bei
  
• Klicke auf
  und
• Akzeptiere die Lizenzbedingungen und klicke auf
• Klicke auf
  
  und auf
• Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
  und speichere die Logdatei auf Deinem Desktop.
• Schließe HitmanPro und poste mir das Log.

 

Schritt 3

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4
Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.






Bitte poste mit deiner nächsten Antwort

• die Logdatei von FRST,
• die Logdatei von HitmanPro,
• die Logdatei von ESET,
• die Logdatei von SecurityCheck.

Hier die nächsten Log-Dateien:

FRST Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Runo at 2014-04-12 10:48:20 Run:1
Running from C:\Users\Runo\frstt
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
HKLM-x32\...\Run: [] - [X]
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\...\Run: [] - [X]
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Task: {6545D43B-0B3A-4D37-B878-095A50B4F712} - System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job => C:\Program Files\V-bates\PrefHelper.exe
C:\Program Files\V-bates
end
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKU\S-1-5-21-3394165559-2773926514-3256092546-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\DatamngrCoordinator.exe => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6545D43B-0B3A-4D37-B878-095A50B4F712} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6545D43B-0B3A-4D37-B878-095A50B4F712} => Key deleted successfully.
C:\Windows\System32\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A} => Key deleted successfully.
C:\Windows\Tasks\FF Watcher {F563B7F1-A72A-464C-BFB3-F2F0045D2F3A}.job => Moved successfully.
"C:\Program Files\V-bates" => File/Directory not found.

==== End of Fixlog ====
         

HitmanPro

	
	
HitmanPro 3.7.9.216
www.hitmanpro.com

   Computer name . . . . : RUNO-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Runo-PC\Runo
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2014-04-12 10:51:10
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 2m 57s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 5

   Objects scanned . . . : 2.225.942
   Files scanned . . . . : 34.562
   Remnants scanned  . . : 715.774 files / 1.475.606 keys

Cookies _____________________________________________________________________

   C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
   C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
   C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cookies:uk.sitestat.com
   C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
   C:\Users\Runo\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
         
 
 

ESET

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=e13a0d99e9e71a4cba41cbc01ad19d4f
# engine=17859
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-12 11:08:52
# local_time=2014-04-12 01:08:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 8390 4932486 1168 0
# compatibility_mode=5893 16776574 100 94 4535798 148930782 0 0
# scanned=238144
# found=0
# cleaned=0
# scan_time=7837
         

SecurityCheck

 Results of screen317's Security Check version 0.99.81  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 51  
 JavaScript Tooling    
 Visual Studio Extensions for Windows Library for JavaScript 
 Adobe Reader XI  
 Google Chrome 33.0.1750.154  
 Google Chrome 34.0.1847.116  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Hi,

Matti ist im Urlaub. Noch Probleme?

Hallo Schrauber,

nein, keine Probleme mehr. Keine Pop-Ups oder sonstiger Spam.
Nochmals vielen Dank für eure ausführliche Hilfestellung.
Hat mir sehr geholfen.

Grüße
Runo

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.