Windows 7:werbefenster öffnen sich

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by Roger (administrator) on ROGER-PC on 09-04-2014 08:50:03
Running from C:\Users\Roger\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\NIS.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
() C:\Users\Roger\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Smartbar) C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Creative Island Media, LLC) C:\ProgramData\Websteroids\WebsteroidsService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Creative Island Media, LLC) C:\ProgramData\Websteroids\Websteroids.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-03-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2118376963-2483719709-1888182258-1000\...\Run: [Slick Savings] - C:\Users\Roger\AppData\Roaming\Slick Savings\CouponsHelper.exe [832320 2014-02-13] (Spigot, Inc.)
HKU\S-1-5-21-2118376963-2483719709-1888182258-1000\...\Run: [Browser Infrastructure Helper] - C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.exe [20248 2014-01-12] (Smartbar)
HKU\S-1-5-21-2118376963-2483719709-1888182258-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-2118376963-2483719709-1888182258-1000\...\MountPoints2: {e888000b-0c2c-11e3-aa11-940c6d80a995} - F:\iLinker.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\Users\Roger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Steuersoftware 2014\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b2fb44d6-bdc5-3bc5-7bbc-95542daa9477&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=26/02/2014&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b2fb44d6-bdc5-3bc5-7bbc-95542daa9477&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=26/02/2014&type=hp1000
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - No File
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1396629833&from=cor&uid=SAMSUNGXHD502HJ_S20BJA0B540386&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b2fb44d6-bdc5-3bc5-7bbc-95542daa9477&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=26/02/2014&type=hp1000
SearchScopes: HKCU - {286D2900-BA6D-40C8-B28F-CBAE0C4C6279} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=402027&p={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Better Surf Plus - {1824FF90-C98E-48A6-838F-E3B6572B0C77} -  No File
BHO-x32: flash-Enhancer - {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - C:\Program Files (x86)\AmiExt\flashEnhancer\ie\AmiBho.dll ()
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: StumbleUpon - {DB616CFF-D989-48A8-9C85-E2A8D56AB2CA} - C:\Users\Roger\AppData\LocalLow\StumbleUpon\IE\StumbleUpon.dll (StumbleUpon Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default
FF DefaultSearchEngine: sweet-page
FF SelectedSearchEngine: sweet-page
FF Homepage: gmx.de
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=402027&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\sweet-page.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Slick Savings - C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\Extensions\savingsslider@mybrowserbar.com [2014-02-11]
FF Extension: StumbleUpon - C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\Extensions\toolbar@stumbleupon.com [2014-04-04]
FF Extension: Start Page - C:\Users\Roger\AppData\Roaming\Mozilla\Firefox\Profiles\r3zf214h.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-02-11]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2013-11-04]
FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF Extension: flash-Enhancer - C:\Program Files (x86)\AmiExt\flashEnhancer\ff [2013-11-09]
FF HKLM-x32\...\Firefox\Extensions: [12x3q4@3244516.com] - C:\Program Files (x86)\Better-Surf\ff
FF Extension: Better-Surf - C:\Program Files (x86)\Better-Surf\ff [2013-11-27]
FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff

==================== Services (Whitelisted) =================

R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [688240 2014-03-26] (Cherished Technololgy LIMITED)
R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\psia.exe [1229528 2013-12-06] (Secunia)
R2 StumbleUponUpdater; C:\Users\Roger\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe [18432 2011-11-22] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 Websteroids; C:\ProgramData\Websteroids\Websteroids.exe [151416 2014-03-22] (Creative Island Media, LLC)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\BASHDefs\20140319.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-02-22] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\IPSDefs\20140408.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\VirusDefs\20140408.019\ENG64.SYS [126040 2014-02-22] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\VirusDefs\20140408.019\EX64.SYS [2099288 2014-02-22] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-04] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2013-03-26] (TuneUp Software)
S3 RdpVideoMiniport; System32\drivers\rdpvideominiport.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 08:50 - 2014-04-09 08:50 - 00015640 _____ () C:\Users\Roger\Desktop\FRST.txt
2014-04-09 08:49 - 2014-04-09 08:50 - 00000000 ____D () C:\FRST
2014-04-09 08:49 - 2014-04-09 08:49 - 02157056 _____ (Farbar) C:\Users\Roger\Desktop\FRST64.exe
2014-04-04 22:41 - 2014-04-04 22:41 - 00086160 _____ () C:\Users\Roger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-04 22:40 - 2014-04-04 22:41 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-04 19:54 - 2014-04-04 20:50 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer Generals Zero Hour Data
2014-04-04 19:54 - 2014-04-04 19:54 - 00000915 _____ () C:\Users\Public\Desktop\Command and Conquer Generals and Zero Hour.lnk
2014-04-04 19:54 - 2014-04-04 19:54 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer Generals Data
2014-04-04 19:05 - 2014-04-04 19:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-04 19:01 - 2014-04-04 19:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Roger\Downloads\MovieMaker.exe
2014-04-04 18:53 - 2014-04-04 18:53 - 00000020 _____ () C:\Windows\@ô,
2014-04-04 18:47 - 2014-04-04 18:47 - 00003104 _____ () C:\Windows\System32\Tasks\{86F889AC-EEBE-471B-9E1B-F01B75307049}
2014-04-04 18:44 - 2014-04-04 18:46 - 00000000 ____D () C:\ProgramData\WPM
2014-04-04 18:44 - 2014-04-04 18:46 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-04-04 18:44 - 2014-04-04 18:44 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\SupTab
2014-04-04 18:44 - 2014-04-04 18:44 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-04 18:43 - 2014-04-04 18:46 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\systweak
2014-04-04 18:43 - 2014-04-04 18:46 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\sweet-page
2014-04-04 18:43 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-04-04 18:37 - 2014-04-09 08:49 - 00000000 ____D () C:\Users\Roger\AppData\Local\Websteroids
2014-04-04 18:34 - 2014-04-04 18:34 - 00000000 ____D () C:\Users\Roger\Documents\Pinnacle VideoSpin
2014-04-04 18:34 - 2014-04-04 18:34 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\NVIDIA
2014-04-04 18:32 - 2014-04-04 18:32 - 00000000 ____D () C:\Users\Roger\AppData\Local\Downloaded Installations
2014-04-04 18:32 - 2014-04-04 18:32 - 00000000 ____D () C:\ProgramData\Pinnacle
2014-04-04 18:30 - 2014-04-08 11:21 - 00000000 ____D () C:\ProgramData\Websteroids
2014-04-04 18:30 - 2014-04-04 18:30 - 00000000 ____D () C:\Users\Roger\Downloads\VideoSpin_2_0_Setup
2014-04-04 18:26 - 2014-04-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-04 15:52 - 2014-04-04 15:52 - 00000020 _____ () C:\Windows\àô§
2014-04-03 20:52 - 2014-04-04 19:53 - 00038086 _____ () C:\Windows\DirectX.log
2014-04-01 19:46 - 2014-04-01 19:46 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer 3 Kanes Wrath
2014-04-01 19:39 - 2014-04-09 08:19 - 00398616 _____ () C:\Windows\WindowsUpdate.log
2014-04-01 19:36 - 2014-04-09 08:15 - 00006671 _____ () C:\Windows\setupact.log
2014-04-01 19:36 - 2014-04-04 18:57 - 00015458 _____ () C:\Windows\PFRO.log
2014-04-01 19:36 - 2014-04-01 19:36 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 18:24 - 2014-04-01 18:24 - 00000000 ____D () C:\Program Files (x86)\TraXEx
2014-04-01 18:14 - 2014-04-01 19:07 - 00000000 ____D () C:\Users\Roger\Desktop\Wartung
2014-03-31 20:21 - 2014-03-31 20:21 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-03-30 12:40 - 2014-03-30 12:40 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 3 Tiberium Wars
2014-03-30 12:35 - 2014-03-30 12:37 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 3 Kanes Wrath
2014-03-30 12:33 - 2014-03-30 12:33 - 00000816 _____ () C:\Users\Public\Desktop\Command and Conquer 3 Tiberium Wars and Kane's Wrath.lnk
2014-03-29 22:10 - 2014-03-29 22:10 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer 4
2014-03-29 22:01 - 2014-03-29 22:09 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 4
2014-03-29 22:01 - 2014-03-29 22:01 - 00000000 ____D () C:\Users\Roger\AppData\Local\Electronic_Arts_Inc
2014-03-29 17:38 - 2014-03-29 17:38 - 00000000 ____D () C:\Users\Roger\Documents\Red Alert 3 Uprising
2014-03-29 17:30 - 2014-03-29 17:31 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Red Alert 3 Uprising
2014-03-29 17:28 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-28 20:13 - 2014-03-28 20:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-28 20:13 - 2014-03-28 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-28 20:13 - 2014-03-28 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 19:04 - 2014-03-28 19:04 - 03849304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-28 19:04 - 2014-03-28 19:04 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02787032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02100312 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-28 19:04 - 2014-03-28 19:04 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01014360 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00732833 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-28 19:04 - 2014-03-28 19:04 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00156888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-28 19:03 - 2014-03-28 19:03 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-03-28 19:03 - 2014-03-28 19:03 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-28 19:02 - 2014-03-28 19:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-23 10:16 - 2014-03-23 10:16 - 00007088 ____N () C:\bootsqm.dat
2014-03-22 17:26 - 2014-03-22 17:30 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Kalypso Media
2014-03-22 17:25 - 2014-03-22 17:25 - 00002142 _____ () C:\Users\Public\Desktop\Patrician IV Gold.lnk
2014-03-22 17:21 - 2014-03-22 17:21 - 00000000 ____D () C:\Program Files (x86)\Kalypso Media
2014-03-22 01:02 - 2014-03-22 01:02 - 01161080 _____ () C:\Windows\SysWOW64\Websteroids.B324755F3F87.dll
2014-03-21 21:35 - 2014-03-21 21:35 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-03-21 21:35 - 2014-03-21 21:35 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-03-17 11:32 - 2014-03-17 11:32 - 00000000 ____D () C:\Users\Roger\Tracing
2014-03-17 11:31 - 2014-04-04 19:06 - 00000000 ____D () C:\Windows\de
2014-03-17 11:30 - 2014-03-17 11:30 - 00000000 ____D () C:\Program Files\Windows Live
2014-03-17 11:30 - 2014-03-17 11:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-03-17 11:30 - 2013-02-05 23:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-03-17 11:29 - 2014-04-04 19:06 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ___RD () C:\Users\Roger\SkyDrive
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-03-17 11:26 - 2014-04-04 19:32 - 00000000 ____D () C:\Users\Roger\AppData\Local\Windows Live
2014-03-13 15:44 - 2014-03-13 15:45 - 00000000 ____D () C:\Users\Roger\Downloads\Die Gilde 2
2014-03-13 15:27 - 2014-03-23 13:39 - 00000000 ____D () C:\Die Gilde 2 - Gold Edition
2014-03-12 21:41 - 2014-03-12 21:41 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\wargaming.net
2014-03-12 21:15 - 2014-03-12 21:15 - 00000802 _____ () C:\Users\Public\Desktop\World of Warplanes.lnk
2014-03-12 21:15 - 2014-03-12 21:15 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-12 21:15 - 2014-03-12 21:15 - 00000000 ____D () C:\Games
2014-03-12 18:34 - 2014-03-22 18:39 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Apple Computer
2014-03-12 18:34 - 2014-03-12 18:34 - 00001494 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-12 18:34 - 2014-03-12 18:34 - 00000000 ____D () C:\Users\Roger\AppData\Local\Apple Computer
2014-03-12 18:33 - 2012-08-21 14:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-03-12 18:32 - 2014-03-12 18:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-12 18:32 - 2014-03-12 18:33 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 18:32 - 2014-03-12 18:33 - 00000000 ____D () C:\iTunes
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Users\Roger\AppData\Local\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-12 18:31 - 2014-03-12 18:32 - 00000000 ____D () C:\ProgramData\Apple
2014-03-12 18:31 - 2014-03-12 18:31 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-12 18:31 - 2014-03-12 18:31 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-12 18:30 - 2014-03-12 18:30 - 148885840 _____ (Apple Inc.) C:\Users\Roger\Downloads\iTunes64Setup.exe
2014-03-12 07:48 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:48 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 07:48 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 07:48 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 07:48 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 07:48 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 07:48 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 07:47 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 07:47 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 07:47 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 07:47 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:47 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 07:47 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 07:47 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 07:47 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 07:47 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:47 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 07:47 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 07:47 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:47 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 07:47 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 07:47 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 07:47 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 07:47 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 07:47 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 07:47 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 07:47 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 07:47 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 07:47 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 07:47 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 07:47 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 07:47 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 07:47 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 07:47 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 07:47 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 07:47 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 07:47 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 07:47 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 07:47 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 07:47 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 07:47 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 07:47 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 07:47 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 07:47 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 07:47 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 07:47 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 07:47 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 07:47 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-11 20:54 - 2014-03-11 20:54 - 00000000 ____D () C:\Users\Roger\AppData\Local\Ironclad Games
2014-03-11 20:54 - 2014-03-11 20:54 - 00000000 ____D () C:\ProgramData\Stardock
2014-03-11 20:28 - 2014-03-11 20:28 - 00000000 ____D () C:\Users\Roger\AppData\Local\Stardock
2014-03-11 08:19 - 2014-03-11 08:19 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-03-11 07:59 - 2014-03-11 07:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-11 07:56 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-11 07:56 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

==================== One Month Modified Files and Folders =======

2014-04-09 08:50 - 2014-04-09 08:50 - 00015640 _____ () C:\Users\Roger\Desktop\FRST.txt
2014-04-09 08:50 - 2014-04-09 08:49 - 00000000 ____D () C:\FRST
2014-04-09 08:49 - 2014-04-09 08:49 - 02157056 _____ (Farbar) C:\Users\Roger\Desktop\FRST64.exe
2014-04-09 08:49 - 2014-04-04 18:37 - 00000000 ____D () C:\Users\Roger\AppData\Local\Websteroids
2014-04-09 08:23 - 2009-07-14 06:45 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:23 - 2009-07-14 06:45 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 08:21 - 2013-08-01 21:18 - 00761088 _____ () C:\Windows\system32\perfh007.dat
2014-04-09 08:21 - 2013-08-01 21:18 - 00174700 _____ () C:\Windows\system32\perfc007.dat
2014-04-09 08:21 - 2009-07-14 07:13 - 01775444 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-09 08:19 - 2014-04-01 19:39 - 00398616 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 08:15 - 2014-04-01 19:36 - 00006671 _____ () C:\Windows\setupact.log
2014-04-09 08:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-08 21:06 - 2013-08-02 08:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-08 20:36 - 2013-08-01 19:35 - 00000000 ____D () C:\Der Herr der Ringe Online
2014-04-08 12:44 - 2013-09-21 21:37 - 00000000 ____D () C:\Steam
2014-04-08 12:42 - 2013-08-19 18:30 - 00000000 ____D () C:\ProgramData\Origin
2014-04-08 12:38 - 2013-08-19 18:30 - 00000000 ____D () C:\Origin
2014-04-08 11:21 - 2014-04-04 18:30 - 00000000 ____D () C:\ProgramData\Websteroids
2014-04-04 22:41 - 2014-04-04 22:41 - 00086160 _____ () C:\Users\Roger\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-04 22:41 - 2014-04-04 22:40 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-04 20:50 - 2014-04-04 19:54 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer Generals Zero Hour Data
2014-04-04 19:54 - 2014-04-04 19:54 - 00000915 _____ () C:\Users\Public\Desktop\Command and Conquer Generals and Zero Hour.lnk
2014-04-04 19:54 - 2014-04-04 19:54 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer Generals Data
2014-04-04 19:53 - 2014-04-03 20:52 - 00038086 _____ () C:\Windows\DirectX.log
2014-04-04 19:49 - 2013-08-19 18:56 - 00000000 ____D () C:\Sims
2014-04-04 19:32 - 2014-03-17 11:26 - 00000000 ____D () C:\Users\Roger\AppData\Local\Windows Live
2014-04-04 19:06 - 2014-03-17 11:31 - 00000000 ____D () C:\Windows\de
2014-04-04 19:06 - 2014-03-17 11:29 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-04 19:05 - 2014-04-04 19:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-04 19:02 - 2014-04-04 19:01 - 142602520 _____ (Microsoft Corporation) C:\Users\Roger\Downloads\MovieMaker.exe
2014-04-04 18:57 - 2014-04-01 19:36 - 00015458 _____ () C:\Windows\PFRO.log
2014-04-04 18:53 - 2014-04-04 18:53 - 00000020 _____ () C:\Windows\@ô,
2014-04-04 18:47 - 2014-04-04 18:47 - 00003104 _____ () C:\Windows\System32\Tasks\{86F889AC-EEBE-471B-9E1B-F01B75307049}
2014-04-04 18:46 - 2014-04-04 18:44 - 00000000 ____D () C:\ProgramData\WPM
2014-04-04 18:46 - 2014-04-04 18:44 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-04-04 18:46 - 2014-04-04 18:43 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\systweak
2014-04-04 18:46 - 2014-04-04 18:43 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\sweet-page
2014-04-04 18:44 - 2014-04-04 18:44 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\SupTab
2014-04-04 18:44 - 2014-04-04 18:44 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-04 18:34 - 2014-04-04 18:34 - 00000000 ____D () C:\Users\Roger\Documents\Pinnacle VideoSpin
2014-04-04 18:34 - 2014-04-04 18:34 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\NVIDIA
2014-04-04 18:32 - 2014-04-04 18:32 - 00000000 ____D () C:\Users\Roger\AppData\Local\Downloaded Installations
2014-04-04 18:32 - 2014-04-04 18:32 - 00000000 ____D () C:\ProgramData\Pinnacle
2014-04-04 18:30 - 2014-04-04 18:30 - 00000000 ____D () C:\Users\Roger\Downloads\VideoSpin_2_0_Setup
2014-04-04 18:26 - 2014-04-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-04 15:52 - 2014-04-04 15:52 - 00000020 _____ () C:\Windows\àô§
2014-04-04 15:43 - 2013-11-22 21:36 - 00000000 ____D () C:\Users\Roger\AppData\Local\CrashDumps
2014-04-01 21:11 - 2014-01-04 21:32 - 00000000 ____D () C:\Users\Roger\Documents\Kraftsport
2014-04-01 19:46 - 2014-04-01 19:46 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer 3 Kanes Wrath
2014-04-01 19:36 - 2014-04-01 19:36 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 19:07 - 2014-04-01 18:14 - 00000000 ____D () C:\Users\Roger\Desktop\Wartung
2014-04-01 18:24 - 2014-04-01 18:24 - 00000000 ____D () C:\Program Files (x86)\TraXEx
2014-03-31 20:21 - 2014-03-31 20:21 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-03-30 17:20 - 2013-08-01 19:56 - 01748788 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-30 12:40 - 2014-03-30 12:40 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 3 Tiberium Wars
2014-03-30 12:37 - 2014-03-30 12:35 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 3 Kanes Wrath
2014-03-30 12:33 - 2014-03-30 12:33 - 00000816 _____ () C:\Users\Public\Desktop\Command and Conquer 3 Tiberium Wars and Kane's Wrath.lnk
2014-03-29 22:10 - 2014-03-29 22:10 - 00000000 ____D () C:\Users\Roger\Documents\Command and Conquer 4
2014-03-29 22:09 - 2014-03-29 22:01 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Command and Conquer 4
2014-03-29 22:01 - 2014-03-29 22:01 - 00000000 ____D () C:\Users\Roger\AppData\Local\Electronic_Arts_Inc
2014-03-29 17:38 - 2014-03-29 17:38 - 00000000 ____D () C:\Users\Roger\Documents\Red Alert 3 Uprising
2014-03-29 17:31 - 2014-03-29 17:30 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Red Alert 3 Uprising
2014-03-29 17:30 - 2013-08-19 18:30 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-03-29 16:43 - 2013-08-19 18:31 - 00000000 ____D () C:\Users\Roger\AppData\Local\Origin
2014-03-29 16:37 - 2013-08-19 18:31 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Origin
2014-03-28 20:13 - 2014-03-28 20:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-28 20:13 - 2014-03-28 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-28 20:13 - 2014-03-28 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 20:06 - 2013-08-02 08:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-28 20:06 - 2013-08-02 08:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-28 20:06 - 2013-08-02 08:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-28 19:18 - 2013-08-15 19:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-28 19:04 - 2014-03-28 19:04 - 03849304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-28 19:04 - 2014-03-28 19:04 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02787032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02100312 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-28 19:04 - 2014-03-28 19:04 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01022680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 01014360 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00732833 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-28 19:04 - 2014-03-28 19:04 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-03-28 19:04 - 2014-03-28 19:04 - 00156888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-28 19:04 - 2014-02-11 21:22 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-28 19:03 - 2014-03-28 19:03 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-03-28 19:03 - 2014-03-28 19:03 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-03-28 19:03 - 2013-08-01 12:06 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-28 19:03 - 2011-06-10 06:34 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-28 19:02 - 2014-03-28 19:02 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-28 19:02 - 2014-03-28 19:02 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-28 19:02 - 2014-01-07 21:47 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-28 19:02 - 2014-01-07 21:47 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-28 19:02 - 2013-08-01 12:06 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-28 19:02 - 2013-02-26 00:32 - 18257576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-28 19:02 - 2013-02-26 00:32 - 03090184 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-28 19:02 - 2013-02-26 00:32 - 00947296 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-03-28 19:02 - 2013-02-26 00:32 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-28 18:58 - 2013-11-09 19:57 - 00000356 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-23 16:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-23 13:39 - 2014-03-13 15:27 - 00000000 ____D () C:\Die Gilde 2 - Gold Edition
2014-03-23 11:21 - 2014-02-11 21:19 - 00000284 _____ () C:\Windows\Tasks\Driver Booster Update.job
2014-03-23 10:39 - 2014-02-11 21:19 - 00003216 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-03-23 10:39 - 2014-02-11 21:19 - 00002560 _____ () C:\Windows\System32\Tasks\Driver Booster Update
2014-03-23 10:25 - 2013-08-01 21:19 - 00000000 ____D () C:\Windows\Panther
2014-03-23 10:16 - 2014-03-23 10:16 - 00007088 ____N () C:\bootsqm.dat
2014-03-22 22:53 - 2013-11-23 17:48 - 00003696 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-03-22 18:39 - 2014-03-12 18:34 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Apple Computer
2014-03-22 17:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-22 17:30 - 2014-03-22 17:26 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Kalypso Media
2014-03-22 17:25 - 2014-03-22 17:25 - 00002142 _____ () C:\Users\Public\Desktop\Patrician IV Gold.lnk
2014-03-22 17:21 - 2014-03-22 17:21 - 00000000 ____D () C:\Program Files (x86)\Kalypso Media
2014-03-22 01:02 - 2014-03-22 01:02 - 01161080 _____ () C:\Windows\SysWOW64\Websteroids.B324755F3F87.dll
2014-03-21 21:35 - 2014-03-21 21:35 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-03-21 21:35 - 2014-03-21 21:35 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-03-21 21:35 - 2014-02-11 21:19 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\Slick Savings
2014-03-20 20:46 - 2013-11-04 20:41 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-03-18 18:32 - 2013-08-14 05:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 18:31 - 2013-08-01 12:24 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 11:32 - 2014-03-17 11:32 - 00000000 ____D () C:\Users\Roger\Tracing
2014-03-17 11:32 - 2013-08-01 11:26 - 00000000 ____D () C:\Users\Roger
2014-03-17 11:30 - 2014-03-17 11:30 - 00000000 ____D () C:\Program Files\Windows Live
2014-03-17 11:30 - 2014-03-17 11:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-03-17 11:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ___RD () C:\Users\Roger\SkyDrive
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-03-17 11:27 - 2014-03-17 11:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-03-17 10:12 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-13 15:45 - 2014-03-13 15:44 - 00000000 ____D () C:\Users\Roger\Downloads\Die Gilde 2
2014-03-12 21:41 - 2014-03-12 21:41 - 00000000 ____D () C:\Users\Roger\AppData\Roaming\wargaming.net
2014-03-12 21:15 - 2014-03-12 21:15 - 00000802 _____ () C:\Users\Public\Desktop\World of Warplanes.lnk
2014-03-12 21:15 - 2014-03-12 21:15 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-03-12 21:15 - 2014-03-12 21:15 - 00000000 ____D () C:\Games
2014-03-12 18:34 - 2014-03-12 18:34 - 00001494 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-12 18:34 - 2014-03-12 18:34 - 00000000 ____D () C:\Users\Roger\AppData\Local\Apple Computer
2014-03-12 18:33 - 2014-03-12 18:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-12 18:33 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 18:33 - 2014-03-12 18:32 - 00000000 ____D () C:\iTunes
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Users\Roger\AppData\Local\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-12 18:32 - 2014-03-12 18:32 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-12 18:32 - 2014-03-12 18:31 - 00000000 ____D () C:\ProgramData\Apple
2014-03-12 18:31 - 2014-03-12 18:31 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-12 18:31 - 2014-03-12 18:31 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-03-12 18:30 - 2014-03-12 18:30 - 148885840 _____ (Apple Inc.) C:\Users\Roger\Downloads\iTunes64Setup.exe
2014-03-12 09:14 - 2013-08-19 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-11 20:54 - 2014-03-11 20:54 - 00000000 ____D () C:\Users\Roger\AppData\Local\Ironclad Games
2014-03-11 20:54 - 2014-03-11 20:54 - 00000000 ____D () C:\ProgramData\Stardock
2014-03-11 20:28 - 2014-03-11 20:28 - 00000000 ____D () C:\Users\Roger\AppData\Local\Stardock
2014-03-11 08:32 - 2013-12-27 19:33 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-03-11 08:19 - 2014-03-11 08:19 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-03-11 07:59 - 2014-03-11 07:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-14 16:09

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Roger at 2014-04-09 08:50:46
Running from C:\Users\Roger\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security CBE (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security CBE (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security CBE (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

„Der Herr der Ringe Online™“ v03.08.00.8025 (HKLM-x32\...\12bbe590-c890-11d9-9669-0800200c9a66_is1) (Version: 03.08.00.8025 - Turbine, Inc.)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Command & Conquer™ 3 Tiberium Wars and Kane's Wrath (HKLM-x32\...\{35A2FE53-CC80-4D17-941F-3A7C82824FC7}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Command & Conquer™: Generals and Zero Hour (HKLM-x32\...\{8F0F5689-6900-425B-A8C2-0DBD10DAB694}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.55.4 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
flash-Enhancer (HKLM-x32\...\flash-Enhancer) (Version: 2.1 - flash-Enhancer.com) <==== ATTENTION
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Lightspark 0.5.3-git (HKLM-x32\...\Lightspark) (Version: 0.5.3-git - Lightspark Team)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE  (HKLM-x32\...\{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}) (Version: 2.0.675.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}) (Version: 3.0.19.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Norton Internet Security CBE (HKLM-x32\...\NIS) (Version: 21.1.0.18 - Symantec Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 334.89 (Version: 334.89 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenTTD 1.3.2 (HKLM-x32\...\OpenTTD) (Version: 1.3.2 - OpenTTD)
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7161 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Software Version Updater (HKLM-x32\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ATTENTION
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TraXEx 6.0 (HKLM-x32\...\TraXEx_is1) (Version: 6.0.0.0 - Alexander Miehlke Softwareentwicklung)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.154 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.154 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.154 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
Websteroids (HKLM-x32\...\Websteroids) (Version: 2.6.71 - Creative Island Media, LLC) <==== ATTENTION
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WISO Steuer 2014 (HKCU\...\{89FBE37A-B9D4-4E4E-8363-B7070DC7E53D}) (Version: 21.00.8480 - Buhl Data Service GmbH)

==================== Restore Points  =========================

04-04-2014 16:50:00 Removed Pinnacle VideoSpin.
04-04-2014 16:51:52 DirectX wurde installiert
04-04-2014 16:52:00 DirectX wurde installiert
04-04-2014 16:52:14 DirectX wurde installiert
04-04-2014 16:54:37 Windows Live Essentials
04-04-2014 16:54:45 WLSetup
04-04-2014 17:02:50 Windows Live Essentials
04-04-2014 17:03:58 DirectX wurde installiert
04-04-2014 17:04:17 DirectX wurde installiert
04-04-2014 17:04:38 DirectX wurde installiert
04-04-2014 17:05:30 WLSetup
04-04-2014 17:52:28 DirectX wurde installiert
07-04-2014 12:24:25 Windows Live Essentials

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1BFA8398-681B-4E5C-B347-DD3F76C0B47B} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {1CA3099A-D6FB-4EE4-A0CA-AB1E7CD683A6} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software)
Task: {403E89BD-6136-4011-895A-ABA64B0C4B64} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {41595793-A126-4354-A5E4-3F8CBF411B0A} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {423A532F-06C4-44E7-B092-CB6C6E38AC33} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {5988FCA2-8C5B-4749-BE74-EAFE1071C332} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-28] (Adobe Systems Incorporated)
Task: {659FDBDD-9D23-4756-88C5-A77D0F91D1DD} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {69A24F90-3A0E-425F-ABCB-4FCBDDE52323} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {7BB30B0F-F288-4347-BD1F-5C3413214A13} - System32\Tasks\AmiUpdXp => C:\Users\Roger\AppData\Local\SwvUpdater\Updater.exe [2013-11-09] (Amonetizé Ltd) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Roger\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Driver Booster Update.job => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-01 12:06 - 2014-02-08 19:42 - 00117024 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-11-22 10:59 - 2011-11-22 10:59 - 00018432 _____ () C:\Users\Roger\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe
2014-01-28 17:09 - 2014-01-28 17:09 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00034072 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00063256 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\srau.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00149784 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00111896 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 02151192 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00055064 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\spbl.dll
2014-01-12 16:19 - 2014-01-12 16:19 - 00012568 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\siem.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00047896 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\sppsm.dll
2014-01-12 16:19 - 2014-01-12 16:19 - 00727320 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00081176 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00013592 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00016664 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00030488 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\srut.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00019736 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\srsbs.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00056600 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2014-01-12 16:19 - 2014-01-12 16:19 - 00013592 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\sgml.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00052504 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00013592 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\srpdm.dll
2014-01-12 16:19 - 2014-01-12 16:19 - 00047384 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2014-01-12 16:18 - 2014-01-12 16:18 - 00025368 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00024856 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2014-01-12 16:20 - 2014-01-12 16:20 - 00247576 _____ () C:\Users\Roger\AppData\Local\Smartbar\Application\srns.dll
2014-03-28 20:13 - 2014-03-15 10:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-03-12 13:06 - 2014-03-28 20:06 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 08:17:21 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 08:16:07 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: lpksetup.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1f7
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000002a84e
ID des fehlerhaften Prozesses: 0xd44
Startzeit der fehlerhaften Anwendung: 0xlpksetup.exe0
Pfad der fehlerhaften Anwendung: lpksetup.exe1
Pfad des fehlerhaften Moduls: lpksetup.exe2
Berichtskennung: lpksetup.exe3

Error: (04/09/2014 06:22:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 06:21:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: lpksetup.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1f7
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000002a84e
ID des fehlerhaften Prozesses: 0xcd0
Startzeit der fehlerhaften Anwendung: 0xlpksetup.exe0
Pfad der fehlerhaften Anwendung: lpksetup.exe1
Pfad des fehlerhaften Moduls: lpksetup.exe2
Berichtskennung: lpksetup.exe3

Error: (04/08/2014 08:13:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 08:12:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: lpksetup.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1f7
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000002a84e
ID des fehlerhaften Prozesses: 0xc28
Startzeit der fehlerhaften Anwendung: 0xlpksetup.exe0
Pfad der fehlerhaften Anwendung: lpksetup.exe1
Pfad des fehlerhaften Moduls: lpksetup.exe2
Berichtskennung: lpksetup.exe3

Error: (04/08/2014 07:38:51 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 07:37:30 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: lpksetup.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1f7
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000002a84e
ID des fehlerhaften Prozesses: 0x3e4
Startzeit der fehlerhaften Anwendung: 0xlpksetup.exe0
Pfad der fehlerhaften Anwendung: lpksetup.exe1
Pfad des fehlerhaften Moduls: lpksetup.exe2
Berichtskennung: lpksetup.exe3

Error: (04/08/2014 06:20:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 06:19:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: lpksetup.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7a1f7
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0x40000015
Fehleroffset: 0x000000000002a84e
ID des fehlerhaften Prozesses: 0xb10
Startzeit der fehlerhaften Anwendung: 0xlpksetup.exe0
Pfad der fehlerhaften Anwendung: lpksetup.exe1
Pfad des fehlerhaften Moduls: lpksetup.exe2
Berichtskennung: lpksetup.exe3


System errors:
=============
Error: (04/06/2014 00:36:30 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/06/2014 00:36:29 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/06/2014 00:35:31 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/06/2014 00:35:29 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/06/2014 00:35:28 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/06/2014 00:35:27 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


Microsoft Office Sessions:
=========================
Error: (04/09/2014 08:17:21 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 08:16:07 AM) (Source: Application Error)(User: )
Description: lpksetup.exe6.1.7601.175144ce7a1f7msvcrt.dll7.0.7601.177444eeb033f40000015000000000002a84ed4401cf53bb2fb20a69C:\Windows\system32\lpksetup.exeC:\Windows\system32\msvcrt.dll6f905a09-bfae-11e3-b08c-940c6d80a995

Error: (04/09/2014 06:22:41 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/09/2014 06:21:20 AM) (Source: Application Error)(User: )
Description: lpksetup.exe6.1.7601.175144ce7a1f7msvcrt.dll7.0.7601.177444eeb033f40000015000000000002a84ecd001cf53ab2673e66bC:\Windows\system32\lpksetup.exeC:\Windows\system32\msvcrt.dll661b7665-bf9e-11e3-ad9c-940c6d80a995

Error: (04/08/2014 08:13:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 08:12:16 PM) (Source: Application Error)(User: )
Description: lpksetup.exe6.1.7601.175144ce7a1f7msvcrt.dll7.0.7601.177444eeb033f40000015000000000002a84ec2801cf53560d4cf01dC:\Windows\system32\lpksetup.exeC:\Windows\system32\msvcrt.dll50b0adb9-bf49-11e3-981e-940c6d80a995

Error: (04/08/2014 07:38:51 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 07:37:30 PM) (Source: Application Error)(User: )
Description: lpksetup.exe6.1.7601.175144ce7a1f7msvcrt.dll7.0.7601.177444eeb033f40000015000000000002a84e3e401cf5351348912b4C:\Windows\system32\lpksetup.exeC:\Windows\system32\msvcrt.dll74d9a462-bf44-11e3-ad78-940c6d80a995

Error: (04/08/2014 06:20:29 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/08/2014 06:19:14 PM) (Source: Application Error)(User: )
Description: lpksetup.exe6.1.7601.175144ce7a1f7msvcrt.dll7.0.7601.177444eeb033f40000015000000000002a84eb1001cf534645feed8eC:\Windows\system32\lpksetup.exeC:\Windows\system32\msvcrt.dll85806784-bf39-11e3-904f-940c6d80a995


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 4093.24 MB
Available physical RAM: 2435.74 MB
Total Pagefile: 8184.66 MB
Available Pagefile: 6418.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:196.13 GB) (Free:39.64 GB) NTFS
Drive d: () (Fixed) (Total:269.53 GB) (Free:269.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A16CD4F7)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-09 09:07:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD502HJ rev.1AJ10001 465,76GB
Running: 5hz0bwje.exe; Driver: C:\Users\Roger\AppData\Local\Temp\kglorpow.sys


---- User code sections - GMER 2.1 ----

.text  C:\ProgramData\IePluginService\PluginService.exe[1216] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000076e41465 2 bytes [E4, 76]
.text  C:\ProgramData\IePluginService\PluginService.exe[1216] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2
.text  C:\Program Files (x86)\Secunia\PSI\psia.exe[1684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                      0000000076e41465 2 bytes [E4, 76]
.text  C:\Program Files (x86)\Secunia\PSI\psia.exe[1684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                     0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2
.text  C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.exe[2284] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69   0000000076e41465 2 bytes [E4, 76]
.text  C:\Users\Roger\AppData\Local\Smartbar\Application\Smartbar.exe[2284] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155  0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2
.text  C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                  0000000076e41465 2 bytes [E4, 76]
.text  C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                 0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2
.text  C:\ProgramData\Websteroids\WebsteroidsService.exe[2752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                0000000076e41465 2 bytes [E4, 76]
.text  C:\ProgramData\Websteroids\WebsteroidsService.exe[2752] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155               0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2
.text  C:\ProgramData\Websteroids\Websteroids.exe[2816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                       0000000076e41465 2 bytes [E4, 76]
.text  C:\ProgramData\Websteroids\Websteroids.exe[2816] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                      0000000076e414bb 2 bytes [E4, 76]
.text  ...                                                                                                                            * 2

---- EOF - GMER 2.1 ----