Blau unterstrichener Text im Browser (rrsavings, rrfilter)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-04-2014 01
Ran by scary (administrator) on V4ND4R on 18-04-2014 16:26:03
Running from D:\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\002\bukgmhvrux64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() c:\Program Files\RrFilter\RrFilterService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
() C:\Program Files (x86)\scary\Hama S1\S1_2k.exe
(Dropbox, Inc.) C:\Users\scary\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2583040 2009-09-21] (VIA)
HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-3569910090-1362072758-1005780473-1000\...\Run: [Steam] => D:\Games\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-3569910090-1362072758-1005780473-1000\...\Run: [La_View Mouse] => C:\Program Files (x86)\scary\Hama S1\S1_2k.exe [2887680 2005-11-05] ()
HKU\S-1-5-21-3569910090-1362072758-1005780473-1000\...\MountPoints2: {43cbdfc1-251d-11e2-a502-00252255807d} - F:\Startme.exe
Startup: C:\Users\scary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\scary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\scary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD1A325FE72A6CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=protegere
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=protegere
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll ()
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default
FF user.js: detected! => C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\user.js
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Homepage: hxxp://de.yahoo.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\searchplugins\Plusnetwork.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: RrSavings - C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\Extensions\RrSavings@jetpack [2014-04-18]
FF Extension: Protegere - C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\Extensions\security@protegere.org [2014-04-18]
FF Extension: Adblock Plus - C:\Users\scary\AppData\Roaming\Mozilla\Firefox\Profiles\68o0lesx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-10]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF Extension: V-bates - C:\Program Files\V-bates\Firefox [2014-04-18]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] ()
R2 bukgmhvrux64; C:\Program Files\002\bukgmhvrux64.exe [706560 2014-04-18] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 RrFilterService64; c:\Program Files\RrFilter\RrFilterService64.exe [171008 2014-03-06] ()
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-13] (Wacom Technology, Corp.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61736 2014-02-28] (NetFilterSDK.com)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]
S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-18 15:55 - 2014-04-18 16:26 - 00000000 ____D () C:\FRST
2014-04-18 15:10 - 2014-04-18 15:59 - 00000000 ____D () C:\Program Files\RrFilter
2014-04-18 15:09 - 2014-04-18 15:35 - 00000000 ____D () C:\Program Files\V-bates
2014-04-18 15:08 - 2014-04-18 15:09 - 00000000 ____D () C:\Program Files\002
2014-04-18 15:08 - 2014-04-18 15:08 - 00000000 ____D () C:\Users\scary\AppData\Roaming\Security System 2
2014-04-18 15:08 - 2014-04-18 15:08 - 00000000 ____D () C:\Users\scary\AppData\Roaming\BupSystem
2014-04-18 14:41 - 2014-04-18 14:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-18 14:41 - 2014-04-18 14:41 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-18 14:31 - 2014-04-18 14:31 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-07 00:35 - 2014-04-07 00:35 - 00001654 _____ () C:\Users\scary\AppData\Local\recently-used.xbel
2014-04-07 00:04 - 2014-04-07 00:04 - 00001011 _____ () C:\Users\Public\Desktop\Inkscape.lnk
2014-04-07 00:04 - 2014-04-07 00:04 - 00000000 ____D () C:\Users\scary\AppData\Roaming\inkscape
2014-04-07 00:01 - 2014-04-07 00:04 - 00000000 ____D () C:\Program Files (x86)\Inkscape
2014-03-29 17:35 - 2014-03-29 17:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 18:59 - 2014-04-15 14:26 - 00000053 _____ () C:\Users\scary\Desktop\Neues Textdokument (2).txt
2014-03-24 00:18 - 2014-03-24 22:51 - 00000000 ____D () C:\Users\scary\Documents\PlanetExplorers
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-03-23 14:33 - 2013-11-12 02:16 - 00090424 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-03-23 14:33 - 2013-11-12 02:16 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-03-23 14:33 - 2013-11-12 02:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-03-23 14:33 - 2012-04-12 00:34 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2014-03-23 14:33 - 2012-04-12 00:34 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

==================== One Month Modified Files and Folders =======

2014-04-18 16:26 - 2014-04-18 15:55 - 00000000 ____D () C:\FRST
2014-04-18 16:01 - 2009-07-14 06:51 - 00673339 _____ () C:\Windows\setupact.log
2014-04-18 15:59 - 2014-04-18 15:10 - 00000000 ____D () C:\Program Files\RrFilter
2014-04-18 15:47 - 2012-10-10 01:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-18 15:43 - 2009-07-14 06:45 - 00014368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-18 15:43 - 2009-07-14 06:45 - 00014368 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-18 15:42 - 2009-07-14 19:58 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2014-04-18 15:42 - 2009-07-14 19:58 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2014-04-18 15:42 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-18 15:39 - 2012-10-10 00:51 - 01947960 _____ () C:\Windows\WindowsUpdate.log
2014-04-18 15:38 - 2012-10-10 01:55 - 00000000 ____D () C:\Users\scary\AppData\Roaming\Dropbox
2014-04-18 15:37 - 2012-10-09 21:20 - 00000000 ___RD () C:\Users\scary\Documents\My Dropbox
2014-04-18 15:35 - 2014-04-18 15:09 - 00000000 ____D () C:\Program Files\V-bates
2014-04-18 15:35 - 2012-10-10 03:03 - 00245838 _____ () C:\Windows\PFRO.log
2014-04-18 15:35 - 2012-10-10 01:41 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-18 15:35 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-18 15:33 - 2012-10-10 15:29 - 00000000 ____D () C:\Users\scary\AppData\Roaming\TS3Client
2014-04-18 15:09 - 2014-04-18 15:08 - 00000000 ____D () C:\Program Files\002
2014-04-18 15:08 - 2014-04-18 15:08 - 00000000 ____D () C:\Users\scary\AppData\Roaming\Security System 2
2014-04-18 15:08 - 2014-04-18 15:08 - 00000000 ____D () C:\Users\scary\AppData\Roaming\BupSystem
2014-04-18 14:42 - 2014-01-12 14:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-18 14:41 - 2014-04-18 14:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-18 14:41 - 2014-04-18 14:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-18 14:41 - 2014-04-18 14:41 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-18 14:31 - 2014-04-18 14:31 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-04-17 22:57 - 2013-12-16 23:23 - 00000000 ____D () C:\Users\scary\AppData\Local\DayZ
2014-04-17 01:49 - 2012-10-10 01:23 - 00000000 ____D () C:\Users\scary\AppData\Roaming\vlc
2014-04-15 14:26 - 2014-03-27 18:59 - 00000053 _____ () C:\Users\scary\Desktop\Neues Textdokument (2).txt
2014-04-14 23:45 - 2013-08-15 20:36 - 00007608 _____ () C:\Users\scary\AppData\Local\Resmon.ResmonCfg
2014-04-14 18:25 - 2012-10-10 05:37 - 00370359 _____ () C:\Windows\DirectX.log
2014-04-14 17:47 - 2013-12-24 23:29 - 00000000 ____D () C:\Users\scary\AppData\Local\Warframe
2014-04-07 00:35 - 2014-04-07 00:35 - 00001654 _____ () C:\Users\scary\AppData\Local\recently-used.xbel
2014-04-07 00:04 - 2014-04-07 00:04 - 00001011 _____ () C:\Users\Public\Desktop\Inkscape.lnk
2014-04-07 00:04 - 2014-04-07 00:04 - 00000000 ____D () C:\Users\scary\AppData\Roaming\inkscape
2014-04-07 00:04 - 2014-04-07 00:01 - 00000000 ____D () C:\Program Files (x86)\Inkscape
2014-04-04 19:53 - 2014-02-02 21:36 - 00000000 ____D () C:\Users\scary\AppData\Local\Battle.net
2014-04-02 23:26 - 2013-03-25 22:19 - 00000000 ____D () C:\Users\scary\AppData\Roaming\Audacity
2014-03-30 10:24 - 2012-10-10 01:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 17:35 - 2014-03-29 17:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-24 22:51 - 2014-03-24 00:18 - 00000000 ____D () C:\Users\scary\Documents\PlanetExplorers
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-03-23 14:33 - 2014-03-23 14:33 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-03-23 14:33 - 2013-01-10 16:08 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-03-23 14:33 - 2013-01-10 16:07 - 00000000 ____D () C:\Program Files\Tablet
2014-03-21 20:23 - 2013-11-29 20:12 - 00000000 ____D () C:\Users\scary\AppData\Roaming\Skype

Some content of TEMP:
====================
C:\Users\scary\AppData\Local\Temp\1_Offer_6.exe
C:\Users\scary\AppData\Local\Temp\6_Offer_16.exe
C:\Users\scary\AppData\Local\Temp\avgnt.exe
C:\Users\scary\AppData\Local\Temp\dxwebsetup.exe
C:\Users\scary\AppData\Local\Temp\Foxit Updater.exe
C:\Users\scary\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\scary\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\scary\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\scary\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\scary\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\scary\AppData\Local\Temp\nvStInst.exe
C:\Users\scary\AppData\Local\Temp\sonarinst.exe
C:\Users\scary\AppData\Local\Temp\SRLDetectionLibrary6108991260442443172.dll
C:\Users\scary\AppData\Local\Temp\Uninstaller-3716.exe
C:\Users\scary\AppData\Local\Temp\Uninstaller-4732.exe
C:\Users\scary\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\scary\AppData\Local\Temp\vlc-2.0.8-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-09 00:58

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-04-2014 01
Ran by scary at 2014-04-18 16:08:33
Running from D:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.2.28500 - BitTorrent Inc.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.6.0.5970 - Adobe Systems Incorporated) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{D3364347-0A05-CA85-1DAD-80A7A75BF677}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bamboo Dock (HKLM-x32\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Bamboo Tablets Tutorial (x32 Version: 3.0.20 - Wacom) Hidden
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Cube World version 0.0.1 (HKLM-x32\...\{D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1) (Version: 0.0.1 - Picroma)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - )
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - )
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 5.4.3.920 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Hama Slide S1 Gaming Mouse (HKLM-x32\...\Hama Slide S1 Gaming Mouse) (Version:  - )
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - )
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
Mozilla Firefox 28.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 en-US)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Planet Explorers (HKLM-x32\...\Steam App 237870) (Version:  - Pathea Games)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
Protegere (HKLM-x32\...\Protegere) (Version:  - )
Railroad Tycoon 2: Platinum (HKLM-x32\...\Steam App 7620) (Version:  - PopTop)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
RrFilter (Version: 1.0.0.0 - RrFilter) Hidden
rrsavings (HKLM\...\rrsavings) (Version: 2.0.1 - rrsavings)
RrSavings (x32 Version: 1.0.0.0 - RrSavings) Hidden
Rust (HKLM-x32\...\Steam App 252490) (Version:  - )
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
VLC media player 2.0.3 (HKLM-x32\...\VLC media player) (Version: 2.0.3 - VideoLAN)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-3 - Wacom Technology Corp.)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Restore Points  =========================

04-04-2014 19:54:20 Geplanter Prüfpunkt
12-04-2014 12:56:19 Geplanter Prüfpunkt
14-04-2014 16:23:44 DirectX wurde installiert
18-04-2014 12:27:10 Installed Java 7 Update 55 (64-bit)
18-04-2014 12:30:20 Installed System Requirements Lab Detection
18-04-2014 12:34:36 Removed MorphVOX Junior
18-04-2014 12:35:03 Removed Java 7 Update 55 (64-bit)
18-04-2014 12:35:34 Removed Java 7 Update 45
18-04-2014 12:41:31 Installed Java 7 Update 55

==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-11-10 20:53 - 00000098 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {77E58487-995E-4E77-99EC-DA696B132D9A} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {8206E920-2955-49CE-8400-4BF975737802} - System32\Tasks\AdobeAAMUpdater-1.0-v4nd4r-scary => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {9FB2885A-EF44-4548-A2DC-B6BDBE5E1F64} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {D8F4C25D-BBAC-402C-B132-C65C603F7885} - System32\Tasks\{69A195F9-46D1-4AF4-8FA7-1E304803163D} => Firefox.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsBing
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-10-10 01:41 - 2013-12-19 20:53 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-18 15:09 - 2014-04-18 15:09 - 00706560 _____ () C:\Program Files\002\bukgmhvrux64.exe
2014-03-06 15:52 - 2014-03-06 15:52 - 00171008 _____ () c:\Program Files\RrFilter\RrFilterService64.exe
2014-03-04 13:25 - 2014-03-04 13:25 - 00110080 _____ () c:\Program Files\RrFilter\nfapi.dll
2014-03-04 13:25 - 2014-03-04 13:25 - 00317952 _____ () c:\Program Files\RrFilter\ProtocolFilters.dll
2012-10-10 17:14 - 2005-11-05 01:39 - 02887680 _____ () C:\Program Files (x86)\scary\Hama S1\S1_2k.exe
2012-10-10 04:13 - 2009-05-07 16:51 - 00071680 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2012-10-10 04:13 - 2009-05-07 16:53 - 00379392 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2012-10-10 04:13 - 2008-01-18 14:50 - 00098816 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll
2012-10-10 04:13 - 2009-09-02 09:26 - 47601664 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2012-10-16 11:39 - 2012-10-16 11:39 - 00646744 _____ () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
2013-01-10 16:07 - 2014-01-13 18:24 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2012-10-10 02:34 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-08 16:01 - 2013-12-13 00:19 - 00142848 _____ () D:\Games\Steam\libavresample-1.dll
2014-01-08 16:01 - 2013-11-05 03:12 - 00890592 _____ () D:\Games\Steam\libavutil-52.dll
2013-03-25 14:23 - 2014-02-11 04:34 - 00751616 _____ () D:\Games\Steam\SDL2.dll
2012-10-10 01:54 - 2014-02-25 23:57 - 01135296 _____ () D:\Games\Steam\bin\chromehtml.DLL
2012-10-10 01:54 - 2014-01-11 01:33 - 20625832 _____ () D:\Games\Steam\bin\libcef.dll
2012-10-10 01:54 - 2013-06-15 01:49 - 01100800 _____ () D:\Games\Steam\bin\avcodec-53.dll
2012-10-10 01:54 - 2013-06-15 01:49 - 00124416 _____ () D:\Games\Steam\bin\avutil-51.dll
2012-10-10 01:54 - 2013-06-15 01:49 - 00192000 _____ () D:\Games\Steam\bin\avformat-53.dll
2014-03-11 23:47 - 2014-03-11 23:47 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
2012-12-13 23:23 - 2014-02-25 23:57 - 00119488 _____ () D:\Games\Steam\bin\audio.dll
2012-10-10 01:54 - 2013-06-15 01:49 - 00071680 _____ () D:\Games\Steam\bin\mssmp3.asi
2012-10-10 01:54 - 2013-06-15 01:49 - 00153088 _____ () D:\Games\Steam\bin\mssvoice.asi
2012-10-10 17:14 - 2005-01-12 09:17 - 00028672 _____ () C:\Program Files (x86)\scary\Hama S1\MouseHook.dll
2012-10-10 17:14 - 2005-06-01 19:36 - 00028672 _____ () C:\Program Files (x86)\scary\Hama S1\hodll.dll
2012-10-10 17:14 - 2003-06-09 22:31 - 00389120 _____ () C:\Windows\SysWow64\actskn43.ocx
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\scary\AppData\Roaming\Dropbox\bin\libcef.dll
2012-10-16 11:39 - 2012-10-16 11:39 - 00060504 _____ () C:\Program Files (x86)\Bamboo Dock\BambooWinTab.dll
2014-03-29 17:35 - 2014-03-29 17:35 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/18/2014 03:37:49 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/18/2014 03:34:54 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (04/18/2014 03:10:01 PM) (Source: Application Hang) (User: )
Description: Programm Download Manager fuer FreeMind.exe, Version 3.0.0.78 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e28

Startzeit: 01cf5b07392be8a0

Endzeit: 9

Anwendungspfad: D:\Downloads\Download Manager fuer FreeMind.exe

Berichts-ID:

Error: (04/18/2014 03:09:59 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.17859, Zeitstempel: 0x4fd2d1d9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00086828
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3

Error: (04/18/2014 02:34:54 PM) (Source: MsiInstaller) (User: v4nd4r)
Description: Product: MorphVOX Junior -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files (x86)\Screaming Bee\MorphVOX Junior\MorphDriverUninstall2.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (04/17/2014 05:35:40 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/17/2014 11:33:06 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/17/2014 00:30:04 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DayZ.exe, Version: 0.44.123.800, Zeitstempel: 0x534d3337
Name des fehlerhaften Moduls: DayZ.exe, Version: 0.44.123.800, Zeitstempel: 0x534d3337
Ausnahmecode: 0xc0000005
Fehleroffset: 0x005b599b
ID des fehlerhaften Prozesses: 0x748
Startzeit der fehlerhaften Anwendung: 0xDayZ.exe0
Pfad der fehlerhaften Anwendung: DayZ.exe1
Pfad des fehlerhaften Moduls: DayZ.exe2
Berichtskennung: DayZ.exe3

Error: (04/17/2014 00:11:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DayZ.exe, Version: 0.44.123.800, Zeitstempel: 0x534d3337
Name des fehlerhaften Moduls: DayZ.exe, Version: 0.44.123.800, Zeitstempel: 0x534d3337
Ausnahmecode: 0xc0000005
Fehleroffset: 0x005b599b
ID des fehlerhaften Prozesses: 0x10ec
Startzeit der fehlerhaften Anwendung: 0xDayZ.exe0
Pfad der fehlerhaften Anwendung: DayZ.exe1
Pfad des fehlerhaften Moduls: DayZ.exe2
Berichtskennung: DayZ.exe3

Error: (04/16/2014 07:57:52 PM) (Source: Application Hang) (User: )
Description: Programm Tech Wars.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 136c

Startzeit: 01cf599afee93025

Endzeit: 140

Anwendungspfad: D:\Torque3D\My Projects\Tech Wars\game\Tech Wars.exe

Berichts-ID: 9efd97ab-c590-11e3-acec-00252255807d


System errors:
=============
Error: (04/18/2014 03:12:34 PM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Installer" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (04/18/2014 03:10:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/18/2014 02:41:37 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (04/18/2014 02:41:37 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (04/18/2014 02:41:36 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (04/17/2014 11:51:25 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/17/2014 11:51:22 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/17/2014 11:51:19 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/17/2014 11:51:16 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/17/2014 11:51:12 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


Microsoft Office Sessions:
=========================
Error: (04/18/2014 03:37:49 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/18/2014 03:34:54 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (04/18/2014 03:10:01 PM) (Source: Application Hang)(User: )
Description: Download Manager fuer FreeMind.exe3.0.0.78e2801cf5b07392be8a09D:\Downloads\Download Manager fuer FreeMind.exe

Error: (04/18/2014 03:09:59 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.7601.175144ce792c4SHELL32.dll6.1.7601.178594fd2d1d9c00000050008682814b001cf5b077ef61a5ac:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\SHELL32.dllbe1e0865-c6fa-11e3-b745-00252255807d

Error: (04/18/2014 02:34:54 PM) (Source: MsiInstaller)(User: v4nd4r)
Description: Product: MorphVOX Junior -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files (x86)\Screaming Bee\MorphVOX Junior\MorphDriverUninstall2.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (04/17/2014 05:35:40 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/17/2014 11:33:06 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/17/2014 00:30:04 AM) (Source: Application Error)(User: )
Description: DayZ.exe0.44.123.800534d3337DayZ.exe0.44.123.800534d3337c0000005005b599b74801cf59c0ee30459aD:\Games\Steam\steamapps\common\DayZ\DayZ.exeD:\Games\Steam\steamapps\common\DayZ\DayZ.exea791e9ba-c5b6-11e3-acec-00252255807d

Error: (04/17/2014 00:11:42 AM) (Source: Application Error)(User: )
Description: DayZ.exe0.44.123.800534d3337DayZ.exe0.44.123.800534d3337c0000005005b599b10ec01cf59be5b17bdd1D:\Games\Steam\steamapps\common\DayZ\DayZ.exeD:\Games\Steam\steamapps\common\DayZ\DayZ.exe16c836b1-c5b4-11e3-acec-00252255807d

Error: (04/16/2014 07:57:52 PM) (Source: Application Hang)(User: )
Description: Tech Wars.exe0.0.0.0136c01cf599afee93025140D:\Torque3D\My Projects\Tech Wars\game\Tech Wars.exe9efd97ab-c590-11e3-acec-00252255807d


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 8191.3 MB
Available physical RAM: 5893.63 MB
Total Pagefile: 16380.8 MB
Available Pagefile: 13585.81 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.56 GB) (Free:38.09 GB) NTFS
Drive d: () (Fixed) (Total:274.95 GB) (Free:123.67 GB) NTFS
Drive f: (Elements) (Fixed) (Total:931.51 GB) (Free:695.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 373 GB) (Disk ID: 26D5BF5E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=275 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 0004A9A0)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================